Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: codingapi/springboot-framework
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v17.3.0
Choose a base ref
...
head repository: codingapi/springboot-framework
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v17.3.1
Choose a head ref
  • 2 commits
  • 7 files changed
  • 2 contributors

Commits on Sep 11, 2026

  1. fix: 分页包装SQL的结果列无法解析物理表字段导致列权限失效

    查询引擎将业务SQL包装为 SELECT 裸列 FROM (...) AS __base__ 形态后,
    结果集元数据的表名为派生表别名或空串,无法映射回物理表字段,
    DataAuthorizationFilter.supportColumnAuthorization 收到错误表名,
    列权限/脱敏失效。
    
    修复方式:遍历AST时为派生表(FROM/JOIN子查询)构建"输出列→物理表字段"
    投影映射(DerivedTableProjection),支持多层派生链归因与单 * 展开归因;
    列权限解析改为联合解析 resolveTableNameAndColumn,命中派生表别名或
    表名为空/未知时沿投影归因,已知物理表及歧义场景保持原有行为不变。
    
    Closes #212
    
    Co-Authored-By: Claude <noreply@anthropic.com>
    xlorne and claude committed Sep 11, 2026
    Configuration menu
    Copy the full SHA
    b2b6e9f View commit details
    Browse the repository at this point in the history
  2. Merge pull request #213 from codingapi/17.3.x

    fix: 分页包装SQL的结果列无法解析物理表字段导致列权限失效
    xlorne authored Sep 11, 2026
    Configuration menu
    Copy the full SHA
    e340e59 View commit details
    Browse the repository at this point in the history
Loading