Table soft validation is incorrect
Closed this issue · 1 comments
Algunenano commented
The current soft validation method is defined to block any table that starts with pg_
:
CartoDB-SQL-API/app/services/pg-entities-access-validator.js
Lines 52 to 59 in 91cd355
So if a user has a table called pg_sth
it will be blocked too. A more effective way to block access to the pg_catalog schema is to check the table schema instead (and avoid using regex).
Algunenano commented
Closing stale ticket