backstage/.changeset/orange-experts-approve.md at f50966e025eb994c56179cbe9fa98fcc8bdae4e4

Files

T

Mike Lewis 06934f2f52 catalog-backend: ensure subqueries are isolated from one another

Ensures that independent calls to `parseFilter` are isolated from one
another, by always wrapping additional clauses to the query in
`andWhere`. I think that the bug in the previous incarnation is strictly
theoretical, as long as parseFilters is only called once for a given
filter (which today, it is). When authorization lands in catalog-backend
though, we'll need to call it multiple times - once to add the authz
filters, and once to add the filters requested by the caller, which
would expose this bug.

Signed-off-by: Mike Lewis <mtlewis@users.noreply.github.com>

2021-11-12 15:45:11 +00:00

145 B

Raw Blame History

@backstage/plugin-catalog-backend

@backstage/plugin-catalog-backend
patch

Adjust entity query construction to ensure sub-queries are always isolated from one another.

145 B Raw Blame History

145 B

Raw Blame History