aboutsummaryrefslogtreecommitdiff
path: root/src/auth.c
Commit message (Collapse)AuthorAge
* Add a C-source spell-checking facility. make misspell (on Nix)larrybr2023-06-07
| | | FossilOrigin-Name: 26c1bb4bd9e9f56613c3aa87407a7f562fd4ebde5bfd6dece02078001d9a45f8
* Refactor field names in the Column object, zCnName and zCnColl, to make themdrh2021-08-02
| | | | | unique and thus easier to find amid all the other code. FossilOrigin-Name: 8b781dcaf68e0cf12a844708c82eee00193e340195cbca915d077e4846983bf3
* Remove an ALWAYS() and NEVER() in the authorizer that become reachabledrh2021-02-06
| | | | | as of [078dbff04a95a001]. Test case for coverage in TH3. FossilOrigin-Name: b469327e2949352325d3db815bd4782f9734239c378f08afd2f00ffa54bef924
* Remove unreachable code. Fix a shift UB problem introduced yesterdaydrh2021-02-05
| | | | | and discovered by OSSFuzz. FossilOrigin-Name: 078dbff04a95a001bbd8690ab08038fbb5506899df8290991b53fd1122a4c30c
* Streamline processing of the authenticator callback for the common casedrh2021-01-01
| | | | | when there is no callback. FossilOrigin-Name: d3196685d958bf22b5c362e96bbf8e1df58cc09cc3abc4bfa94bb33bc28c61aa
* The sqlite3_set_authorizer() interface should only expire prepared statementsdrh2019-08-01
| | | | | | | when it is setting a new authorizer, not when clearing the authorizer. And statements that are running when sqlite3_set_authorizer() is invoked should be allowed to continue running to completion. FossilOrigin-Name: 961e2f08c35238bcb1d32430d16451a96807b2c4bbb194ee621128dd09cd3981
* Add test cases and assert() statements to ensure that the authorizer is beingdan2018-10-06
| | | | | called as expected from within ALTER TABLE. FossilOrigin-Name: ff10d2c7de430c88167b1e6e4f5307eee5d69e22c8d24b2ef4fcb3aea25a92e1
* Experimental implementation of ALTER TABLE ... RENAME COLUMN. Still buggy.dan2018-08-09
| | | FossilOrigin-Name: fa0fc01eb48a864f0a3d43f9b805d5ed2e530846ee0c34fcbc2eabd9e5696277
* Do not abort running queries due to a CREATE INDEX statement. Allow themdrh2018-07-24
| | | | | | to run to completion before being reprepared. Fix for ticket [c694113e50321afdf9]. FossilOrigin-Name: 2bd593332da0aade467e7a4ee89e966aa6302f37540a2c5e23671f98a6cb599c
* Ensure that sqlite3AuthRead() is only call for TK_COLUMN and TK_TRIGGERdrh2018-06-02
| | | | | | | expression nodes. This fixes a harmless assert() identified by OSSFuzz. Move the assert() into a position where it is tested even if the authorizer is disabled. FossilOrigin-Name: d0c3beef7cdc680c0768ddd18f766a4ca7be822c1eb1776b2f73b7433d9962dc
* Size optimization in the authorizer error message generation logic.drh2017-08-17
| | | FossilOrigin-Name: 0367a4d58682a64d7ed4c5a4b4377899e22432851587c649d419efb6d7bac250
* New requirements marks and documentation for the authorizer.drh2017-05-11
| | | FossilOrigin-Name: 3980ea0911b3ad3f86d7a7bdc6503f233315c274f473e18831e13eda2c238eeb
* Rename the Db.zName field to Db.zDbSName to make it more descriptive and todrh2016-08-18
| | | | | | distinguish it from all of the other "zName" variables scattered throughout the code. FossilOrigin-Name: 92a22f01343a898455fd61c3b8e7d7c954f5b569
* Disable the authorizer callback when reparsing the schema. This avoidsdrh2016-07-28
| | | | | undesirable authorization failures following an ALTER TABLE. FossilOrigin-Name: 805d01cdabb48a69eb986a7f084e53eb25d76b7f
* Add the SQLITE_ENABLE_API_ARMOR compile-time option. This is a work indrh2014-10-24
| | | | | progress and is not yet completely functional. FossilOrigin-Name: c297a84bc678f81ffc0aa9139ab73f0ca87c1971
* Add support for the extra parameter on the sqlite3_set_authorizer() callbackdrh2014-09-11
| | | | | | | and support for failing an ATTACH with an authentication-required database using bad credentials. The extension is now feature complete, but much testing and bug-fixing remains. FossilOrigin-Name: 596e728b0eb19a34c888e33d4d37978ca2bf1e00
* Remove the obsolete "$Id:$" RCS identifier strings from the source code.drh2009-11-10
| | | FossilOrigin-Name: f6c045f649036958078cb15cd9d5453680c82b0c
* Handle an SQLITE_IGNORE returned when requesting authorization to read ↵dan2009-10-03
| | | | | parent key columns by pretending the parent key columns contain NULL values. FossilOrigin-Name: 3c24df38e6ae5dfe999bbf3133b65df0074c6a50
* When inserting a row into a child table, invoke the authorization callback ↵dan2009-10-02
| | | | | to request permission to read the parent key columns. FossilOrigin-Name: 9842f2d5f606eb8f641ecae9fbc5368b8d7e4286
* Code simplifications, especially to the pseudo-table logic, and commentdrh2009-09-08
| | | | | improvements. FossilOrigin-Name: 52449a9569b7142095cc88ee208b31cc59a3cab4
* Fix some authorization callback problems.dan2009-08-31
| | | FossilOrigin-Name: 8a746fbfd51f70f56e25ade59df49d2dc03c131c
* Fix to sqlite3AuthRead to accommodate "new" or "old" references that are ↵danielk19772009-07-02
| | | | | used in a context where a column reference may also be used (i.e. "SELECT new.<col> FROM <tble>"). Ticket #3944. (CVS 6838) FossilOrigin-Name: 45fd5419a7cde29eb6ab5d98141bd642af0d78fb
* Changes to auth.c to promote full coverage testing. (CVS 6600)drh2009-05-04
| | | FossilOrigin-Name: c7615b44583c4b3afa45b57c6047478c18c234e9
* Work toward cleaning up the authorizer interface. Work is on-going. Thisdrh2009-05-04
| | | | | is an incremental check-in. (CVS 6598) FossilOrigin-Name: 694662f7860179403e0cc55b45ae8afa45aa7dfb
* Remove unneeded pSchema field from the Expr structure. (CVS 4434)drh2007-09-18
| | | FossilOrigin-Name: b2d605a2714245febb316a24edc7a076e21a3849
* Fix a bug in jrnlTruncate(). And other coverage improvements. (CVS 4367)danielk19772007-09-01
| | | FossilOrigin-Name: 02b751fb9dbc683b1b77a2ed3cdeb4190f7339e0
* The sqlite3_value object now carries an sqlite3* pointer to use fordrh2007-08-21
| | | | | | recording malloc failures. This eliminates the need to pass sqlite3* pointers into many internal interfaces. Also added more mutexing. (CVS 4263) FossilOrigin-Name: 9287276191a582c1cf7cf6b71d8399727d8e534d
* Remove terms with operator TK_AS from the expression tree. Ticket #2356. ↵drh2007-05-14
| | | | | (CVS 3991) FossilOrigin-Name: 5627ff74be9242418434a06fe5c104d1f9128cab
* Add some tests (and fixes) for virtual tables and the authorization ↵danielk19772006-06-16
| | | | | callback. Still more to come. (CVS 3260) FossilOrigin-Name: 9497c66e5533ec143d0efda4a419e4bdf922ae8c
* Make sure the authenticator does not try to authenticate columns indrh2006-01-13
| | | | | subqueries. Ticket #1607. (CVS 2939) FossilOrigin-Name: 55b7dfaf4d3a6d01fffdaf1707e88bcd215d7333
* Add the shared schema/pager modifications. Very few tests so far. (CVS 2859)danielk19772006-01-05
| | | FossilOrigin-Name: deeda0dc06c1595aedd8d06a0c4e88a8abf78cf7
* Fix authentication so that it works with AS aliases. Ticket #1338. (CVS 2570)drh2005-07-29
| | | FossilOrigin-Name: cc7ae73ed01f0b89e31dd8de48b913bbd83887b8
* Modify sub-query handling. Tickets #1083 and #1084. (CVS 2286)danielk19772005-01-29
| | | FossilOrigin-Name: b1b50f315873a8614920d1e3af4a07fb29a7ff6a
* Add the experimental sqlite3_expired() API. (CVS 2263)drh2005-01-22
| | | FossilOrigin-Name: df648d50c0696cf7ada2fe5973d285b494891964
* Allow functions to be created when there are outstanding VMs.drh2004-09-30
| | | | | | (Ticket #926) Fix problems with sqlite3_errcode(). Add tests for sqlite3_errcode(). (CVS 1989) FossilOrigin-Name: d0f1dc5898382258b283308c2cce55a8bc378ee4
* Fix a segfault in the authorizer when it is given a SELECT statement withdrh2004-09-09
| | | | | no FROM clause. Ticket #896. (CVS 1954) FossilOrigin-Name: 97d63b9290ef88b3cd8012c71fdd5b3c74eebc8f
* Fix a naming conflict between sqlite versions 2 and 3. An open sqlite3drh2004-09-06
| | | | | | connection now *must* be called "sqlite3". You cannot call it "sqlite". This might break existing code. (CVS 1941) FossilOrigin-Name: 3ddf5a9d1c480a2e3aa32685879063b11afddbe1
* Omit the DB_Locked and DB_Cookie flags. Other minor cleanup. (CVS 1642)drh2004-06-19
| | | FossilOrigin-Name: 01f74b420c3f24918c066172e09cebbb22568faf
* Don't invoke authorisation callback during database initialisation. (CVS 1588)danielk19772004-06-14
| | | FossilOrigin-Name: 293fbf0aa5c221bc341d0d9afc73d459f427f940
* Change the names of external symbols from sqlite_XXX to sqlite3_XXX. (CVS 1337)danielk19772004-05-10
| | | FossilOrigin-Name: ba2ba24263a9e4d1b65b441295504a5da6380f33
* Change lots of internal symbols from sqliteXXX to sqlite3XXX so that thedanielk19772004-05-08
| | | | | | library links again. It doesn't work yet, due to changes in the btree layer calling convention. (CVS 1324) FossilOrigin-Name: 8af6474c49263ae26216dff9465b33f76b500cf4
* Use sqliteErrorMsg instead of sqliteSetString whereever practical. (CVS 1264)drh2004-02-22
| | | FossilOrigin-Name: 69aac043af7f93e7b3f036622c0ac9261cae1839
* Always use "(char*)0" to terminate the argument list of sqliteSetString().drh2003-12-06
| | | | | This is needed for 64-bit systems that use a 32-bit integer by default. (CVS 1126) FossilOrigin-Name: 656c90387a4a714b4f31040ece9b0e15e30934af
* Changes to comments. In particular, a lengthy comment was added to encode.c drh2003-05-10
| | | | | that explains how the encoder algorithm works. (CVS 966) FossilOrigin-Name: 8b388b2f690dbfd50eefc0fdede1c7785f78afa1
* VDBE cursors numbers for tables in a join do not have to be consecutive.drh2003-05-02
| | | | | This is one step on the road to fixing ticket #272. (CVS 947) FossilOrigin-Name: be7aed2011b4af868b6a0c370c3d41354ae0cdf4
* Report the correct authorization context in the authorization callbackdrh2003-04-25
| | | | | when coding an INSTEAD OF trigger on an update or delete. (CVS 936) FossilOrigin-Name: 67746833fc8de3afff80db413bd63a362bb28218
* Fix some issues with INSTEAD OF triggers. (CVS 930)drh2003-04-24
| | | FossilOrigin-Name: 206b17397b1d2b55179c935927ff1d8215728c32
* Update the authorizer API so that it reports the database that table anddrh2003-04-22
| | | | | | indices belong to and so that it reports when actions are taken in response to a trigger. (CVS 928) FossilOrigin-Name: c675a5504138f34cae6def782b5d3add2c67d2bc
* Fix the authorizer so that it correctly interprets attempts to read thedrh2003-04-16
| | | | | OLD and NEW pseudo-tables of a trigger. (CVS 911) FossilOrigin-Name: f04bd43254b3ba3fccc842214115d4c298e28138
* The sqlite_exec() function now returns SQLITE_AUTH when authorization fails.drh2003-01-31
| | | | | Ticket #231. (CVS 857) FossilOrigin-Name: d93c1aeb544a5b1056424945eb43854213b30e50