mathesar icon indicating copy to clipboard operation
mathesar copied to clipboard

Data Explorer allows adding a table column on which the current role does not have SELECT on

Open pavish opened this issue 4 months ago • 4 comments

Description

  • Open the data explorer for a table with links.
    • Pre-requisite: The current role should SELECT on the base table but not on the linked table.
  • Add some columns from the base table, everything works.
  • Add a column from the linked table. Notice the following error:
  • Screenshot 2024-10-02 at 6 36 01 PM
  • There's no way for the user to remove this column. (Except using Undo).

Expected behavior

  • The user should not be able to choose columns that the role does not have SELECT privilege on.

pavish avatar Oct 02 '24 13:10 pavish