diff options
| -rw-r--r-- | ydb/core/kqp/kqp_worker_actor.cpp | 24 |
1 files changed, 21 insertions, 3 deletions
diff --git a/ydb/core/kqp/kqp_worker_actor.cpp b/ydb/core/kqp/kqp_worker_actor.cpp index cccb8a51e8e..1b27348e647 100644 --- a/ydb/core/kqp/kqp_worker_actor.cpp +++ b/ydb/core/kqp/kqp_worker_actor.cpp @@ -1807,9 +1807,12 @@ private: case NKikimrKqp::QUERY_TYPE_SQL_SCAN: case NKikimrKqp::QUERY_TYPE_SQL_SCRIPT: case NKikimrKqp::QUERY_TYPE_SQL_SCRIPT_STREAMING: { - auto userSID = NACLib::TUserToken(QueryState->UserToken).GetUserSID(); - NSysView::CollectQueryStats(ctx, stats, queryDuration, ExtractQueryText(), - userSID, QueryState->ParametersSize, database, type, requestUnits); + TString text = ExtractQueryText(); + if (IsQueryAllowedToLog(text)) { + auto userSID = NACLib::TUserToken(QueryState->UserToken).GetUserSID(); + NSysView::CollectQueryStats(ctx, stats, queryDuration, text, + userSID, QueryState->ParametersSize, database, type, requestUnits); + } break; } default: @@ -1817,6 +1820,21 @@ private: } } + bool IsQueryAllowedToLog(const TString& text) { + static const TString user = "user"; + static const TString password = "password"; + auto itUser = std::search(text.begin(), text.end(), user.begin(), user.end(), [](const char a, const char b) -> bool { + return std::tolower(a) == b; + }); + if (itUser == text.end()) { + return true; + } + auto itPassword = std::search(itUser, text.end(), password.begin(), password.end(), [](const char a, const char b) -> bool { + return std::tolower(a) == b; + }); + return itPassword == text.end(); + } + TString ExtractQueryText() const { auto compileResult = QueryState->QueryCompileResult; if (compileResult) { |