https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41918 --- Comment #23 from David Cook <dcook@prosentient.com.au> --- (In reply to Martin Renvoize (ashimema) from comment #18)
Created attachment 198260 [details] [review] Bug 41918: (QA follow-up) Degrade gracefully without PROCESS privilege
Koha::Reports->running queries information_schema.processlist. A MySQL user without the PROCESS privilege still sees its own threads, but if the privilege check fails entirely (or the engine returns an unexpected error) the previous code would let the DBI exception bubble up and abort the calling report run.
I was thinking that if they use a database user that is too privileged it could see other Koha database's reports as well, so it might be a good idea to narrow the query even further. -- You are receiving this mail because: You are watching all bug changes.