fix: corrected ORestricted case for count operations in new query engine

orientechnologies · Aug 16, 2024 · d0fbf9e · d0fbf9e
1 parent a184e8d
commit d0fbf9e
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/...src/main/java/com/orientechnologies/orient/core/sql/executor/OSelectExecutionPlanner.java b/...src/main/java/com/orientechnologies/orient/core/sql/executor/OSelectExecutionPlanner.java
@@ -17,6 +17,7 @@
 import com.orientechnologies.orient.core.index.OIndexDefinition;
 import com.orientechnologies.orient.core.metadata.OMetadataInternal;
 import com.orientechnologies.orient.core.metadata.schema.OClass;
+import com.orientechnologies.orient.core.metadata.schema.OImmutableClass;
 import com.orientechnologies.orient.core.metadata.schema.OProperty;
 import com.orientechnologies.orient.core.metadata.schema.OSchema;
 import com.orientechnologies.orient.core.metadata.schema.OType;
@@ -653,13 +654,17 @@ private boolean handleHardwiredCountOnClass(
   private boolean securityPoliciesExistForClass(OIdentifier targetClass, OCommandContext ctx) {
     ODatabaseDocumentInternal db = (ODatabaseDocumentInternal) ctx.getDatabase();
     OSecurityInternal security = db.getSharedContext().getSecurity();
-    OClass clazz =
-        db.getMetadata()
-            .getImmutableSchemaSnapshot()
-            .getClass(targetClass.getStringValue()); // normalize class name case
+    OImmutableClass clazz =
+        (OImmutableClass)
+            db.getMetadata()
+                .getImmutableSchemaSnapshot()
+                .getClass(targetClass.getStringValue()); // normalize class name case
     if (clazz == null) {
       return false;
     }
+    if (clazz.isRestricted()) {
+      return true;
+    }
     return security.isReadRestrictedBySecurityPolicy(
         (ODatabaseSession) db, "database.class." + clazz.getName());
   }