[GEODE-3576] Executing cq should check for DATA:READ:Region permissions at cq installation time rather than on cq processing

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.3.0
• Component/s: cq, security
• Labels: 1.3
• Assignee: Jason Huynh
• Reporter: Jason Huynh
• Created: 07/Sep/17 21:22
• Updated: 20/Apr/18 19:52
• Resolved: 21/Sep/17 16:13

Description

Currently a user can do cq.execute() without data read permissions. The check for DATA:READ:Region occurs later and means the cq is actually installed. It might be better to do the checks for DATA:READ:Region before even installing the cq.