Marcin Maliszkiewicz fb55bef0ac cql3/selection: require EXECUTE on UDA REDUCEFUNC at SELECT time ...

selection::used_functions() pushed the UDA, its SFUNC and its FINALFUNC,
but never the REDUCEFUNC. The reducefunc is invoked by the distributed
aggregation path in service::mapreduce_service, so a user could cause it
to run server-side without holding EXECUTE on it as long as the query
took the mapreduce path.

Also push agg.state_reduction_function so select_statement::check_access
requires EXECUTE on it too.

Fixes SCYLLADB-1756

2026-05-08 16:37:52 +02:00

35 KiB

Raw Blame History

View Raw