[DERBY-6411] Minimal select privilege should be checked in subqueries

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.10.1.1
• Fix Version/s: 10.10.2.0, 10.11.1.1
• Component/s: SQL
• Assignee: Knut Anders Hatlen
• Reporter: Knut Anders Hatlen
• Created: 08/Nov/13 12:47
• Updated: 21/Jan/15 00:23
• Resolved: 15/Nov/13 13:23

Description

DERBY-4191 added checks for minimal select privilege in cases where a SELECT query didn't access any actual column in the base table, such as SELECT COUNT FROM USER1.T and SELECT 1 FROM USER1.T. That privilege checking is only done for top-level SELECT statements. It should also be done for subqueries.

Examples of queries where Derby does not currently check for minimal select privileges on the accessed tables (performed as USER2, which has no privileges on any of USER1's tables):

SELECT * FROM (SELECT COUNT FROM USER1.T) S

SELECT 1 FROM USER1.T UNION SELECT 2 FROM USER1.T

INSERT INTO USER2.T SELECT 1 FROM USER1.T

I believe that the above statements should have failed, but currently they succeed.

Issue Links

• relates to: DERBY-4191 Lack of SELECT privilege does not prevent SELECT COUNT(*)