Summary: | SQL reports should allow Common Table Expressions | ||
---|---|---|---|
Product: | Koha | Reporter: | Michał <schodkowy.omegi-0r> |
Component: | Reports | Assignee: | Bugs List <koha-bugs> |
Status: | NEW --- | QA Contact: | Testopia <testopia> |
Severity: | minor | ||
Priority: | P5 - low | CC: | dcook, mathsabypro |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | --- |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: |
Description
Michał
2025-03-05 22:02:31 UTC
I'm not sure that will work because it would allow the following: WITH ... SELECT ... WITH ... UPDATE ... WITH ... DELETE ... As you noted on Mattermost, I think SQL reports really should have a dedicated read-only user, so that permissions can be managed ultimately by the DB rather than Koha. Actually, now you've gotten me thinking about ways to try to bypass the system... |