兼容性判定
真机验证:oceanbase 4.2.5.7 · BEQUEATH CURRENT_USER/DEFINER 需移除;CURRENT_USER 视图回落 DEFINER 语义,权限敏感场景人工确认 |实测2026-07-09(v4.2.5.7,172.16.0.146): BEQUEATH CURRENT_USER/DEFINER 实测被拒(ORA-00900)支持度none
严重度minor
置信度medium
依据规则ora.ddl.bequeath
怎么改
需按命中位置逐条评估改写
判定说明
BEQUEATH CURRENT_USER/DEFINER 需移除;CURRENT_USER 视图回落 DEFINER 语义,权限敏感场景人工确认 |实测2026-07-09(v4.2.5.7,172.16.0.146): BEQUEATH CURRENT_USER/DEFINER 实测被拒(ORA-00900)
库侧 / 应用侧路径
库侧改造
需人工确认改造边界
应用侧改造
需人工确认改造边界
推荐路线:case_by_case。验证建议:源工具移除该子句但证据级别标 unverified;BEQUEATH CURRENT_USER 视图(调用者权限)被移除后回落 DEFINER 语义,涉及 VPD/权限敏感场景需人工确认
规则样例
CREATE OR REPLACE VIEW v_ctx BEQUEATH CURRENT_USER AS SELECT * FROM session_data
CREATE VIEW v_def BEQUEATH DEFINER AS SELECT 1 FROM dual
CREATE OR REPLACE VIEW v_plain AS SELECT * FROM session_data