Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Returned error for request without permissions #75

Closed
shkov opened this issue Jan 25, 2019 · 4 comments
Closed

Returned error for request without permissions #75

shkov opened this issue Jan 25, 2019 · 4 comments

Comments

@shkov
Copy link

shkov commented Jan 25, 2019

When I make a request to the space for which I do not have permission, an error is returned there is no space with name _, however i would like to get something likepermission denied

@funny-falcon
Copy link

I'll look at, but doubtfully it could be fixed on connector side. I think, that is what tarantool sends back.

What you get when you try to do it through net.box in lua console?

@kostja
Copy link

kostja commented Feb 5, 2019

Whatever tarantool sends back, it does not distinguish between existing and non-existing spaces. There is no way to find out whether a space exists or not if you don't have access to it - the opposite would be a security vulnerability.

@shkov
Copy link
Author

shkov commented Apr 9, 2019

Thanks.

@shkov shkov closed this as completed Apr 9, 2019
@rybakit
Copy link

rybakit commented Apr 9, 2019

There is no way to find out whether a space exists or not if you don't have access to it - the opposite would be a security vulnerability.

Although, you have to be careful with flushing schema spaces. FYI, there is a similar issue for the php connector with the edge case details: tarantool/tarantool-php#71.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants