search

DragonPomelo / trino-opa-example

Apache License 2.0
14 stars 2 forks source link

Check resource filtering with AS #12

Closed shohamyamin closed 9 months ago

shohamyamin commented 10 months ago

Check if using AS for changing the name of a resource will allow you to pass the authorization on the resource although you shouldn't be able to access the resource.

TamKez commented 10 months ago

it doesn't in the following query: SELECT b.supplycost, b.availqty, b.partkey as bli FROM tpch.sf1.partsupp as b;