Ticket #177 (new defect)

Opened 1 year ago

Last modified 8 hours ago

QB's properties parser allows "cross sitegroup constraining"

Reported by: piotras Assigned to: piotras
Priority: minor Milestone: 8.09.2 Ragnaroek
Component: Midgard Core Version: 8.09 Ragnaroek
Keywords: Cc:

Description

When referenced property is constrained in QB or collector, sitegroup's one may be used explicitly with such property, and user defined value may be included in SQL unchecked.

A way to reproduce:

/* SG 1 runtime and QB initialized for midgard_topic */

$qb->add_constraint("creator.sitegroup", "=", 2);

It allows to append "AND person.sitegroup=2" to executed SQL query.

Change History

09/01/08 20:16:34 changed by piotras

  • priority changed from critical to major.
  • version changed from 1.9 to 8.09 Ragnaroek.
  • milestone changed from Midgard 1.9 to 8.09 Ragnaroek.

10/02/08 14:10:09 changed by piotras

  • priority changed from major to minor.

10/13/08 11:00:39 changed by bergie

  • milestone changed from 8.09 Ragnaroek to 8.09.2 Ragnaroek.