Details
-
Bug
-
Resolution: Fixed
-
Major
-
7.1.5, 7.2.4
-
7.1.5-3885
-
Untriaged
-
0
-
Yes
Description
I have a user that only has manage global functions perms
i have two functions
celsius and celsius1 they are both defined as
CREATE FUNCTION celsius(degrees) LANGUAGE INLINE AS (degrees - 32) * 5/9
CREATE FUNCTION celsius1(degrees) LANGUAGE INLINE AS (degrees - 32) * 5/9
ajaybhullar@SCML0613 ~ % curl -u johnDoe100:password1 http://172.23.104.110:8093/query/service -d 'statement=SELECT RAW celsius(10)'
{
"requestID": "8a25948b-91a7-421d-a5aa-91ba64fb70e3",
"signature": "json",
"results": [
],
"errors": [{"code":5010,"msg":"Error evaluating projection","reason":{"caller":"auth:392","code":13014,"key":"datastore.couchbase.insufficient_credentials","message":"User does not have credentials to run execute global functions. Add role query_execute_global_functions to allow the query to run."}}],
"status": "errors",
"metrics":
}
ajaybhullar@SCML0613 ~ % curl -u johnDoe100:password1 http://172.23.104.110:8093/query/service -d 'statement=SELECT RAW celsius1(10)'
{
"requestID": "bb3b4f3b-7dfb-41e5-9a45-6042a4e2c263",
"signature": "json",
"results": [
-12.222222222222221
],
"status": "success",
"metrics":
}
this user ONLY has manage global functions perms, so both should not work
Attachments
Issue Links
- backports to
-
MB-59534 [BP to 7.1.6-MP1 & 7.2.3-MP1] [N1QL][UDF][RBAC] udf can be executed without the proper roles
- Closed
- is caused by
-
MB-58648 [BP to 7.2.4 MB-55053] prepared statement with udf can leak memory
- Closed
- is triggered by
-
MB-58479 Fatal error: concurrent map writes in (*ObjectConstruct).MapChildren()
- Closed