Error on retrieving record by traverse function & enabled record security

[AlexanderRay]

Hi, I have issues by execution following query with enabled RecordSecurity (through ORestricted) if some of vertexes have no read access by current user. "select @Rid from (traverse * from #10:19 WHILE $depth <= 2) where $depth in [0,2] limit 100"

[wolf4ood]

hi @AlexanderRay

can you post the permissions of user manager?

[AlexanderRay]

user manager have no permissions for reading on vertex #5:0, but that vertex is connected to vertex #10:19. should I made some demo-db and upload it somewhere?

[wolf4ood]

Yes thanks

[AlexanderRay]

Hi, here is the dropbox link to the issue demo db "https://db.tt/y3yTQx6M"

sql for reproduce "select @Rid from (traverse * from #12:1 WHILE $depth <= 2) where $depth in [0,2] limit 100"

logged in user is "writer"

[wolf4ood]

hi @AlexanderRay

which version are you using?
I tried with 2.1.11 from console
and i got no results back which i think is correct because user writer is not allowed to read record
#12:0
If i do

select @rid from (traverse * from #12:1 WHILE $depth <= 2) where $depth in [0,2] limit 100

with record #12:1 i get your exception but i think because you specify travers with *
that means that it will try to traverse also the _allow* links, and user writer cannot read that clusters
You can solve it by traversing only graph relationship

select @rid from (traverse both() from #12:1 WHILE $depth <= 2) where $depth in [0,2] limit 100

[AlexanderRay]

@i'm using 2.1.9

I see, it works also for graph relations and not for link types, but it's ok for me.

thanks a lot)