Feature #8462

Check subobjects in query rewriting

Added by Andreas Förthner about 11 years ago. Updated almost 11 years ago.

Status:
New
Priority:
Should have
Assignee:
-
Category:
Security
Target version:
-
Start date:
2010-06-23
Due date:
% Done:

0%

Estimated time:
PHP Version:
Has patch:
Complexity:

Description

For usual queries this could be done by adding join conditions. For an object retrieved by UUID this has to be discussed.

#1

Updated by Karsten Dambekalns about 11 years ago

When we introduce this we need to make sure we do not delete stuff that was kept from being visible. Currently the danger is in the use of removeProperties() within setProperties()...

#2

Updated by Andreas Förthner about 11 years ago

With the current persistence backend implementation this is not needed. But as soon as the backend optimizes queries to fetch more than one object at a time, we will have to intercept the query optimization and add the needed constraints for all fetched subobjects.

Also available in: Atom PDF