Skip to content

Access policies break on MySQL strict mode #11212

Open
@bitwolfe

Description

@bitwolfe

Recently ran into an issue with access policies not being applied for resources after migrating servers. After some debugging and testing I tracked down the source of the problem.

The new server runs Percona Server 5.6 in strict configuration, which had the ONLY_FULL_GROUP_BY sql_mode set. This caused the SQL query in findPolicies() of modResource to fail, due to missing a column in the group by. Simply adding the column to the group by returns the wrong data, however.

In short: The SQL query that fetched access policies for resources does not support the sql_mode ONLY_FULL_GROUP_BY.

Forum post can be found here: http://forums.modx.com/thread/89477/resource-group-acls-being-ignored

Metadata

Metadata

Assignees

No one assigned

    Labels

    area-securitybugThe issue in the code or project, which should be addressed.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions