fix prefix match caused data privacy leak

WeBankBlockchain · Oct 29, 2024 · 7e13cce · 7e13cce
1 parent 73ee453
commit 7e13cce
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 10 deletions.
diff --git a/wedpr-components/authorization/src/main/resources/mapper/AuthMapper.xml b/wedpr-components/authorization/src/main/resources/mapper/AuthMapper.xml
@@ -111,10 +111,10 @@
                     and `id` like concat(#{condition.id}, '%')
                 </if>
                 <if test="condition.applicant != null and condition.applicant !=''">
-                    and `applicant` like concat(#{condition.applicant}, '%')
+                    and `applicant` = #{condition.applicant}
                 </if>
                 <if test="condition.applicantAgency != null and condition.applicantAgency !=''">
-                    and `applicant_agency` like concat(#{condition.applicantAgency}, '%')
+                    and `applicant_agency` = #{condition.applicantAgency}
                 </if>
                 <if test="condition.currentApplyNode != null and condition.currentApplyNode !=''">
                     and `current_auth_node` = #{condition.currentApplyNode}
@@ -178,10 +178,10 @@
                     and `id` like concat(#{condition.id}, '%')
                 </if>
                 <if test="condition.applicant != null and condition.applicant !=''">
-                    and `applicant` like concat(#{condition.applicant}, '%')
+                    and `applicant` = #{condition.applicant}
                 </if>
                 <if test="condition.applicantAgency != null and condition.applicantAgency !=''">
-                    and `applicant_agency` like concat(#{condition.applicantAgency}, '%')
+                    and `applicant_agency` = #{condition.applicantAgency}
                 </if>
                 <if test="condition.applyType != null and condition.applyType !=''">
                     and `apply_type` = #{condition.applyType}

diff --git a/wedpr-components/env-integration/jupyter/src/main/resources/mapper/JupyterMapper.xml b/wedpr-components/env-integration/jupyter/src/main/resources/mapper/JupyterMapper.xml
@@ -79,7 +79,7 @@
                     and `owner` = #{condition.owner}
                 </if>
                 <if test="condition.agency != null and condition.agency !=''">
-                    and `agency` like concat(#{condition.agency}, '%')
+                    and `agency` = #{condition.agency}
                 </if>
                 <if test="condition.status!= null and condition.status !=''">
                     and `status` = #{condition.status}

diff --git a/wedpr-components/meta/project/src/main/resources/mapper/ProjectMapper.xml b/wedpr-components/meta/project/src/main/resources/mapper/ProjectMapper.xml
@@ -220,7 +220,7 @@
                     and `owner` = #{condition.owner}
                 </if>
                 <if test="condition.ownerAgency != null and condition.ownerAgency !=''">
-                    and `owner_agency` like concat(#{condition.ownerAgency}, "%")
+                    and `owner_agency` = #{condition.ownerAgency}
                 </if>
                 <if test="condition.status != null and condition.status !=''">
                     and `status` = #{condition.status}
@@ -276,7 +276,7 @@
                     and `owner` = #{condition.owner}
                 </if>
                 <if test="condition.ownerAgency != null and condition.ownerAgency !=''">
-                    and `owner_agency` like concat(#{condition.ownerAgency}, "%")
+                    and `owner_agency` = #{condition.ownerAgency}
                 </if>
                 <if test="condition.status != null and condition.status !=''">
                     and `status` = #{condition.status}
@@ -323,7 +323,7 @@
                     and `owner` = #{condition.owner}
                 </if>
                 <if test="condition.ownerAgency != null and condition.ownerAgency !=''">
-                    and `owner_agency` like concat(#{condition.ownerAgency}, "%")
+                    and `owner_agency` = #{condition.ownerAgency}
                 </if>
                 <if test="condition.status != null and condition.status !=''">
                     and `status` = #{condition.status}
@@ -367,7 +367,7 @@
                     and `owner` = #{condition.owner}
                 </if>
                 <if test="condition.ownerAgency != null and condition.ownerAgency !=''">
-                    and `owner_agency` like concat(#{condition.ownerAgency}, "%")
+                    and `owner_agency` = #{condition.ownerAgency}
                 </if>
                 <if test="condition.status != null and condition.status !=''">
                     and `status` = #{condition.status}

diff --git a/wedpr-components/meta/resource-follower/src/main/resources/mapper/FollowerMapper.xml b/wedpr-components/meta/resource-follower/src/main/resources/mapper/FollowerMapper.xml
@@ -71,7 +71,7 @@
                     and `id` like concat(#{condition.id}, '%')
                 </if>
                 <if test="condition.userName != null and condition.userName !=''">
-                    and `user_name` like concat(#{condition.userName}, '%')
+                    and `user_name` = #{condition.userName}
                 </if>
                 <if test="condition.agency != null and condition.agency !=''">
                     and `agency` = #{condition.agency}