phoenix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Devaraj Das (JIRA)" <j...@apache.org>
Subject [jira] [Created] (PHOENIX-3126) The driver implementation should take into account the context of the user
Date Fri, 29 Jul 2016 00:02:20 GMT
Devaraj Das created PHOENIX-3126:
------------------------------------

             Summary: The driver implementation should take into account the context of the
user
                 Key: PHOENIX-3126
                 URL: https://issues.apache.org/jira/browse/PHOENIX-3126
             Project: Phoenix
          Issue Type: Bug
            Reporter: Devaraj Das


Ran into this issue ... 
We have an application that proxies various users internally and fires queries for those users.
The Phoenix driver implementation caches connections it successfully creates and keys it by
the ConnectionInfo. The ConnectionInfo doesn't take into consideration the "user". So random
users (including those that aren't supposed to access) can access the tables in this sort
of a setup.
The fix is to also consider the User in the ConnectionInfo.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message