<b>6.0.0.2084</b>
ChudaykinAlex 2026.07.21 08:03:14
Merge commit from fork
* Fix #GHSA-ph3g-gc8r-mjh5: USE_NBACKUP_UTILITY allowed full ALTER DATABASE
SCL_check_database() contained a shortcut that granted any holder of
USE_NBACKUP_UTILITY permission for all ALTER DATABASE clauses, not just
backup-related ones (BEGIN/END BACKUP, ADD/DROP DIFFERENCE FILE).
- Remove the shortcut from SCL_check_database() in scl.epp
- Make AlterDatabaseNode::checkPermission() clause-aware: allow
USE_NBACKUP_UTILITY only when no non-backup clauses are present
* USE_NBACKUP_UTILITY: require full ALTER DATABASE for difference file

Changed paths:
  M src/dsql/DdlNodes.epp
  M src/jrd/scl.epp