]> git.ipfire.org Git - thirdparty/patchwork.git/commit
lib: Grant SELECT on auth_user
authorStephen Finucane <stephen@that.guru>
Sat, 28 Nov 2020 17:32:32 +0000 (17:32 +0000)
committerStephen Finucane <stephen@that.guru>
Sun, 13 Dec 2020 18:21:33 +0000 (18:21 +0000)
commit289f93784e320576a46006ff2641bfcc262b04f8
tree0f88278147256f5444fccbfd44a0ae433f5349f2
parent0922c8afbba59697255a4aa4f8c754120b0dbc5e
lib: Grant SELECT on auth_user

If a mail arrives with the 'X-Patchwork-Delegate' hint header, the
'patchwork.parser' script will need to index the users table to find the
appropriate user. This should be okay from a security perspective since
passwords are hashed and salted and the rest of the information is
mostly accessible publicly via the web UI and REST API.

Signed-off-by: Stephen Finucane <stephen@that.guru>
Suggested-by: Ali Alnubani <alialnu@mellanox.com>
Closes: #365
(cherry picked from commit e69a2adcf50b57980d5eb0074cc72698d5cac31a)
lib/sql/grant-all.mysql.sql
lib/sql/grant-all.postgres.sql