trino
trino copied to clipboard
Check catalog & schema access in USE statement
Description
This PR add checks if user has an access to catalog and schema in USE
statement.
Related issues, pull requests, and links
- Fixes https://github.com/trinodb/trino/issues/14208
Non-technical explanation
USE
statement could be used to guess the catalogs and schemas names that the user has no access to.
Release notes
( ) This is not user-visible or docs only and no release notes are required. ( ) Release notes are required, please propose a release note for me. (x) Release notes are required, with the following suggested text:
# Security
* Fix USE statement which leaks names of catalogs and schemas that the user has no access to. ({issue}`14208`)