Ruben Q L created CALCITE-7745:
----------------------------------

             Summary: Implement a mechanism to restrict the connection 
properties that can be set by the caller
                 Key: CALCITE-7745
                 URL: https://issues.apache.org/jira/browse/CALCITE-7745
             Project: Calcite
          Issue Type: Improvement
          Components: avatica
            Reporter: Ruben Q L
             Fix For: avatica-1.29


In Avatica, an authenticated caller can set any Avatica connection property 
(that is not restricted by the server's configuration), see 
JdbcMeta#openConnection.
However, at the moment, there's no mechanism to implement such restriction, so 
it needs to be implemented (e.g. via allowlist and/or blocklist).
For backwards compatibility, the default of this new mechanism should probably 
be "everything is allowed".



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to