MonetDB: Feb2013 - properly test for update privileges

[Niels Nes]

Changeset: 90596b118e95 for MonetDB
URL: http://dev.monetdb.org/hg/MonetDB?cmd=changeset;node=90596b118e95
Modified Files:
        sql/server/rel_updates.c
Branch: Feb2013
Log Message:

properly test for update privileges


diffs (12 lines):

diff --git a/sql/server/rel_updates.c b/sql/server/rel_updates.c
--- a/sql/server/rel_updates.c
+++ b/sql/server/rel_updates.c
@@ -861,6 +861,8 @@ update_table(mvc *sql, dlist *qname, dli
                                rel_destroy(r);
                                return sql_error(sql, 02, "42S22!UPDATE: no 
such column '%s.%s'", t->base.name, cname);
                        }
+                       if (!table_privs(sql, t, PRIV_UPDATE) && 
!sql_privilege(sql, sql->user_id, c->base.id, PRIV_UPDATE, 0)) 
+                               return sql_error(sql, 02, "UPDATE: insufficient 
privileges for user '%s' to update table '%s' on column '%s'", 
stack_get_string(sql, "current_user"), tname, c->base.name);
                        a = assignment->h->data.sym;
                        if (a) {
                                int status = sql->session->status;
_______________________________________________
checkin-list mailing list
checkin-list@monetdb.org
http://mail.monetdb.org/mailman/listinfo/checkin-list