Description
PrivilegeOperatePersistence has a few places where it builds queries using StringBuilder. It can benefit from the new QueryParamBuilder introduced in SentryStore.
So I moved QueryParamBuilder to a separate class, moved a few methods from MSentryGMPrivilege to PrivilegeOperatePersistence (they were only used there) and converted all string-based query builders to QueryParamBuilder.
Attachments
Attachments
Issue Links
- relates to
-
SENTRY-1476 SentryStore is subject to JDQL injection
- Resolved
-
SENTRY-1609 DelegateSentryStore is subject to JDQL injection
- Resolved
- links to