4 ms·
I'm still waiting for a very simple proxy where I can write rules like "DELETE statements must come with a WHERE".
by technion 5y ago
I'm still waiting for a very simple proxy where I can write rules like "DELETE statements must come with a WHERE".
- orangepanda 5y agoOh this doesnt need a condition, let me just WHERE 1=1
- anitil 4y agoMaybe you could add that the where condition needs the name of the authorising user? Start with "WHERE stmt AND AUTHORIZED_BY='Anitil'" then strip the AUTHORIZED_BY. If they're smart enough to do "WHERE 1=1" they might be smart enough to realise that signing off on it is a bad idea
- technion 5y agoYes, but deliberate malfeasance isn't the usual problem when this occurs, as much as some variant of "the BI person hit run before the query was finished".