trino icon indicating copy to clipboard operation
trino copied to clipboard

Filter out values from system.metadata tables using access control

Open huberty89 opened this issue 2 years ago • 0 comments

Description

This PR filter out values using configured access control from tables:

  • analyze_properties
  • column_properties
  • materialized_view_properties
  • schema_properties
  • table_properties

Related issues, pull requests, and links

  • Fixes https://github.com/trinodb/trino/issues/14000

Non-technical explanation

Do not leak configured catalogs names when user does not have an access to them

Release notes

( ) This is not user-visible and no release notes are required. ( ) Release notes are required, please propose a release note for me. (x) Release notes are required, with the following suggested text:

# Security
* Filter out values from system.metadata tables using access control ({issue}`14000`)

huberty89 avatar Sep 19 '22 18:09 huberty89