Wojciech Mitros 8abed6445a cql: fix authorization when altering a function ...

Currently, when a user is altering a function, they need
both CREATE and ALTER permissions, instead of just ALTER.
Additionally, after altering a function, the user is
treated as an owner of this function, gaining all access
permissions to it.

This patch fixes these 2 issues, by checking only the ALTER
permission when actually altering, and by not modifying
user's permisssions if the user did not actually create
the function.

2023-05-12 10:56:29 +02:00

7.6 KiB

Raw Blame History

View Raw