Uploaded image for project: 'Phoenix'
  1. Phoenix
  2. PHOENIX-3126

The driver implementation should take into account the context of the user

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.8.0
    • Labels:
      None

      Description

      Ran into this issue ...
      We have an application that proxies various users internally and fires queries for those users. The Phoenix driver implementation caches connections it successfully creates and keys it by the ConnectionInfo. The ConnectionInfo doesn't take into consideration the "user". So random users (including those that aren't supposed to access) can access the tables in this sort of a setup.
      The fix is to also consider the User in the ConnectionInfo.

        Attachments

        1. PHOENIX-3126.txt
          3 kB
          Devaraj Das
        2. PHOENIX-3126.2.txt
          4 kB
          Josh Elser
        3. aaaa.java
          5 kB
          Devaraj Das

          Issue Links

            Activity

              People

              • Assignee:
                prabhjyotsingh Prabhjyot Singh
                Reporter:
                devaraj Devaraj Das
              • Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: