[IGNITE-6856] SQL: invalid security checks during query execution

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3
• Fix Version/s: 2.8
• Component/s: cache, sql
• Labels: vulnerability
• Assignee: Vladimir Ozerov
• Reporter: Vladimir Ozerov
• Created: 10/Nov/17 07:41
• Updated: 22/Apr/20 08:44
• Resolved: 02/Nov/18 11:59

Description

Currently security check is performed inside IgniteCacheProxy. This is wrong place. Instead, we should perform it inside query processor after parsing when all affected caches are known.