Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-1255

Reveals masked column with 'concat' function

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Not a Bug
    • 2.1.1
    • N/A
    • masking
    • None

    Description

      Masked column values are revealed with sql function CONCAT.

      For example, masking table with masked column `lastname`,
      select statement returns masked value for lastname.
      But using CONCAT function, values are revealed.

      mysql> SELECT id, firstname, lastname FROM masking;
      +----+-----------+----------+
      | id | firstname | lastname |
      +----+-----------+----------+
      |  1 | test1     | XXXXX    |
      |  2 | test2     | XXXXX    |
      +----+-----------+----------+
       
      mysql> SELECT id, firstname, CONCAT(lastname) FROM masking;
      +----+-----------+------------------+
      | id | firstname | CONCAT(lastname) |
      +----+-----------+------------------+
      |  1 | test1     | mask1            |
      |  2 | test2     | mask2            |
      +----+-----------+------------------+
      2 rows in set (0.00 sec)
      

      Attachments

        1. masking_rules.json
          0.1 kB
        2. maxscale.cnf
          0.4 kB
        3. test.sql
          0.4 kB

        Activity

          People

            Unassigned Unassigned
            monotaro_kanaya Atsushi KANAYA
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.