Track nested DBDirectClient commands authorization checks

XMLWordPrintableJSON

    • Server Security
    • ALL
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Currently an AuthorizationContract is attached to an AuthorizationSession. This contract tracks only top level commands done in the session and skips nested commands made through DBDirectClient.

      We should also track and verify nested commands.

       

      Not doing this could lead to a command adding extra checks and breaking the stable API.

            Assignee:
            Unassigned
            Reporter:
            Adrian Gonzalez Montemayor
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: