[MDEV-13611] Any user can easily bypass CHECK constraints Created: 2017-08-21 Updated: 2017-08-21 |
|
| Status: | Open |
| Project: | MariaDB Server |
| Component/s: | None |
| Affects Version/s: | 10.2 |
| Fix Version/s: | 10.2 |
| Type: | Bug | Priority: | Major |
| Reporter: | Sergei Golubchik | Assignee: | Unassigned |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | None | ||
| Description |
|
With @@check_constraint_check variable any user can easily disable CHECK constraints and insert dirty data into the table. Ideas? Only let SUPER do it? |
| Comments |
| Comment by Elena Stepanova [ 2017-08-21 ] |
|
I think it is not any different from all other stuff that any user can (sadly) bypass – foreign key checks, sql mode, etc. |