# HG changeset patch
# User Sylvain Thénault <sylvain.thenault@logilab.fr>
# Date 1274887184 -7200
# Node ID d66a5d98db5b59bec1f3219f3c2b078469d04980
# Parent  f6c55bec932661913a659deb1b1075f866f4035a
[security] fix security insertion on DISTINCT queries

diff -r f6c55bec9326 -r d66a5d98db5b server/querier.py
--- a/server/querier.py	Wed May 26 15:45:22 2010 +0200
+++ b/server/querier.py	Wed May 26 17:19:44 2010 +0200
@@ -269,6 +269,7 @@
                 # transform in subquery when len(localchecks)>1 and groups
                 if nbtrees > 1 and (select.orderby or select.groupby or
                                     select.having or select.has_aggregat or
+                                    select.distinct or
                                     select.limit or select.offset):
                     newselect = Select()
                     # only select variables in subqueries
@@ -303,6 +304,7 @@
                         select.offset = 0
                     myunion = Union()
                     newselect.set_with([SubQuery(aliases, myunion)], check=False)
+                    newselect.distinct = select.distinct
                     solutions = [sol.copy() for sol in select.solutions]
                     cleanup_solutions(newselect, solutions)
                     newselect.set_possible_types(solutions)