[
https://issues.apache.org/jira/browse/DRILL-8554?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18113354#comment-18113354
]
ASF GitHub Bot commented on DRILL-8554:
---------------------------------------
cgivre opened a new pull request, #3080:
URL: https://github.com/apache/drill/pull/3080
# [DRILL-8554](https://issues.apache.org/jira/browse/DRILL-8554): Update
Jackcess and Fix Linked Table Issue
## Description
This PR bumps Jackcess to version 4.0.11. Additionally MS Access files with
linked tables can potentially allow access to unauthorized files or malicious
code. This PR adds a configuration variable to prohibit linked tables from
being scanned. It defaults to `false`.
## Documentation
An Access file can define tables that live in another database file,
referenced by an absolute local path or a UNC
share embedded in the file itself. Drill refuses to follow those references
by default: reading an untrusted file
would otherwise make the Drillbit open a path of the file author's choosing,
as the Drillbit service account.
If you trust the files being queried and need linked tables to work, set
`allowLinkedDatabases` to `true`:
## Testing
Added additional unit tests to existing MS Access unit tests.
> Update Jackcess and Fix Linked Table Error
> ------------------------------------------
>
> Key: DRILL-8554
> URL: https://issues.apache.org/jira/browse/DRILL-8554
> Project: Apache Drill
> Issue Type: Bug
> Components: Format - MS Access
> Affects Versions: 1.22.0
> Reporter: Charles Givre
> Assignee: Charles Givre
> Priority: Critical
> Fix For: 1.23.0
>
>
> This PR bumps Jackcess to the latest version, 4.0.11. It also adds a new
> configuration option to enable/disable linked tables in MS Access files.
> The option defaults to `false`.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
