Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ bug ]只申请table级别权限,查询报无权限 #446

Closed
jy3792397 opened this issue Sep 11, 2019 · 2 comments
Closed

[ bug ]只申请table级别权限,查询报无权限 #446

jy3792397 opened this issue Sep 11, 2019 · 2 comments
Labels
wontfix This will not be worked on

Comments

@jy3792397
Copy link

重现步骤

现有库aaa,已申请aaa库下面的表bbb的查询权限 bbb表有 name、code字段,以下两种情况会报错你无aaa数据库的查询权限!请先到查询权限管理进行申请

  1. select code ,name from bbb ,怀疑是关键字的问题,查其他字段就不会报错 比如 select qwer from bbb ,select * 也不会报错

类似该issue #134

2.嵌套查询
select * from (select qwer from bbb ) t

重新申请aaa库database级别的权限上面两种情况都不会报错

版本信息

  • 应用版本/分支:Release v1.6.7
  • 部署方式:Docke
@hhyo
Copy link
Owner

hhyo commented Sep 11, 2019

感谢反馈

可参考 #145 以及FAQ中关于SQL查询检验的部分

提示没有库权限是因为关闭了强制校验,当表权限校验失效时会去判断库权限,避免越权查询
可以开启强制校验或者查看日志文件查看inception返回的信息,比如关闭关键字审核配置就可以正常检验

总之表权限和脱敏目前是有限的功能,不能覆盖全部场景

@stale
Copy link

stale bot commented Sep 15, 2019

你已经很久没有回复这个issue了,如果没有进一步的信息的话, 会作为不活跃issue关闭, 感谢你对本项目的贡献。
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
wontfix This will not be worked on
Projects
None yet
Development

No branches or pull requests

2 participants