box: revoke access of guest to LUA function
Since the function is actually an eval, by default there should be no execute access right in public role. Closes tarantool/security#14 NO_DOC=bugfix
Showing
- changelogs/unreleased/ghs-14-revoke-access-to-LUA-from-public.md 3 additions, 0 deletions...ogs/unreleased/ghs-14-revoke-access-to-LUA-from-public.md
- src/box/bootstrap.snap 0 additions, 0 deletionssrc/box/bootstrap.snap
- src/box/lua/upgrade.lua 26 additions, 0 deletionssrc/box/lua/upgrade.lua
- test/box-py/bootstrap.result 1 addition, 1 deletiontest/box-py/bootstrap.result
- test/box/access.result 12 additions, 1 deletiontest/box/access.result
- test/box/access.test.lua 3 additions, 0 deletionstest/box/access.test.lua
Loading