mcp-dbutils 1.0.0__py3-none-any.whl → 1.0.2__py3-none-any.whl

mcp_dbutils/base.py

@@ -188,8 +188,8 @@ class ConnectionHandler(ABC):
                 if "row" in result and "affected" in result:
                     # 从结果字符串中提取受影响的行数
                     import re
-                    # 使用更安全的正则表达式，避免回溯问题
-                    match = re.search(r"(\d+) rows?", result)
+                    # 限制数字长度，避免DoS风险
+                    match = re.search(r"(\d{1,10}) rows?", result)
                     if match:
                         affected_rows = int(match.group(1))
             except Exception:
@@ -601,7 +601,7 @@ class ConnectionServer:
         # Default fallback
         return "unknown_table"
 
-    async def _check_write_permission(self, connection: str, table_name: str, operation_type: str) -> bool:
+    async def _check_write_permission(self, connection: str, table_name: str, operation_type: str) -> None:
         """检查写操作权限
 
         Args:
@@ -609,9 +609,6 @@ class ConnectionServer:
             table_name: 表名
             operation_type: 操作类型 (INSERT, UPDATE, DELETE)
 
-        Returns:
-            bool: 是否有权限执行写操作
-
         Raises:
             ConfigurationError: 如果连接不可写或没有表级权限
         """
@@ -626,7 +623,10 @@ class ConnectionServer:
         write_permissions = db_config.get("write_permissions", {})
         if not write_permissions:
             # 没有细粒度权限控制，默认允许所有写操作
-            return True
+            return
+
+        # 将表名转换为小写，用于大小写不敏感的比较
+        table_name_lower = table_name.lower()
 
         # 检查表级权限
         tables = write_permissions.get("tables", {})
@@ -634,19 +634,22 @@ class ConnectionServer:
             # 没有表级权限配置，检查默认策略
             default_policy = write_permissions.get("default_policy", "read_only")
             if default_policy == "allow_all":
-                return True
+                return
             else:
                 # 默认只读
                 raise ConfigurationError(WRITE_OPERATION_NOT_ALLOWED_ERROR.format(
                     operation=operation_type, table=table_name
                 ))
 
-        # 检查特定表的权限
-        if table_name in tables:
-            table_config = tables[table_name]
+        # 创建表名到配置的映射，支持大小写不敏感的比较
+        tables_lower = {k.lower(): v for k, v in tables.items()}
+
+        # 检查特定表的权限（大小写不敏感）
+        if table_name_lower in tables_lower:
+            table_config = tables_lower[table_name_lower]
             operations = table_config.get("operations", ["INSERT", "UPDATE", "DELETE"])
             if operation_type in operations:
-                return True
+                return
             else:
                 raise ConfigurationError(WRITE_OPERATION_NOT_ALLOWED_ERROR.format(
                     operation=operation_type, table=table_name
@@ -655,15 +658,13 @@ class ConnectionServer:
             # 表未明确配置，检查默认策略
             default_policy = write_permissions.get("default_policy", "read_only")
             if default_policy == "allow_all":
-                return True
+                return
             else:
                 # 默认只读
                 raise ConfigurationError(WRITE_OPERATION_NOT_ALLOWED_ERROR.format(
                     operation=operation_type, table=table_name
                 ))
 
-        return False
-
     def _create_handler_for_type(
         self, db_type: str, connection: str
     ) -> ConnectionHandler:

{mcp_dbutils-1.0.0.dist-info → mcp_dbutils-1.0.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-dbutils
-Version: 1.0.0
+Version: 1.0.2
 Summary: MCP Database Utilities Service
 Author: Dong Hao
 License-Expression: MIT

{mcp_dbutils-1.0.0.dist-info → mcp_dbutils-1.0.2.dist-info}/RECORD

@@ -1,6 +1,6 @@
 mcp_dbutils/__init__.py,sha256=6LLccQv7je2L4IpY_I3OzSJZcK32VUDJv2IY31y6eYg,1900
 mcp_dbutils/audit.py,sha256=U-Fd511HxOQH4BxfCXgd4KyaBLESEBnGsPkUNviSTwc,7294
-mcp_dbutils/base.py,sha256=ao2md_bsbK5s_vsO--m-sZLPfiMp6f_MUVL9o0KzKIA,61720
+mcp_dbutils/base.py,sha256=2KhuovVvSUHV664ppLy1LO4a-CfN2rBF-BrP6eHzIb4,61907
 mcp_dbutils/config.py,sha256=zwN9yPKv4WvEPG3WIRT6uBVZSRxFniSmN2kEog7KPcI,5921
 mcp_dbutils/log.py,sha256=mqxi6I_IL-MF1F_pxBtnYZQKOHbGBJ74gsvZHVelr1w,823
 mcp_dbutils/stats.py,sha256=wMqWPfGnEOg9v5YBtTsARV-1YsFUMM_pKdzitzSU9x4,7137
@@ -16,8 +16,8 @@ mcp_dbutils/sqlite/__init__.py,sha256=fK_3-WylCBYpBAzwuopi8hlwoIGJm2TPAlwcPWG46I
 mcp_dbutils/sqlite/config.py,sha256=rsfAE8yaCVZC39ziXssqsi0EXUOEWA-MtKHvrO-6jG4,4933
 mcp_dbutils/sqlite/handler.py,sha256=vpkyCow26hpBqigNUNW0VGyWhsTz8uFflssM7K-FJi4,21882
 mcp_dbutils/sqlite/server.py,sha256=EBKNKz_wTvChwg6BZlvZIBA1H5mmE2NiNEMOgu_CMy4,7373
-mcp_dbutils-1.0.0.dist-info/METADATA,sha256=qwZMwl9JMQAydeUitTQ_zOhmzE2FplxliOYY03O39OQ,8440
-mcp_dbutils-1.0.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-mcp_dbutils-1.0.0.dist-info/entry_points.txt,sha256=XTjt0QmYRgKOJQT6skR9bp1EMUfIrgpHeZJPZ3CJffs,49
-mcp_dbutils-1.0.0.dist-info/licenses/LICENSE,sha256=1A_CwpWVlbjrKdVEYO77vYfnXlW7oxcilZ8FpA_BzCI,1065
-mcp_dbutils-1.0.0.dist-info/RECORD,,
+mcp_dbutils-1.0.2.dist-info/METADATA,sha256=hZm7hYfZKEzyNJmYCFNPvdXq0JNkJVOj4IJDbfOuihE,8440
+mcp_dbutils-1.0.2.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+mcp_dbutils-1.0.2.dist-info/entry_points.txt,sha256=XTjt0QmYRgKOJQT6skR9bp1EMUfIrgpHeZJPZ3CJffs,49
+mcp_dbutils-1.0.2.dist-info/licenses/LICENSE,sha256=1A_CwpWVlbjrKdVEYO77vYfnXlW7oxcilZ8FpA_BzCI,1065
+mcp_dbutils-1.0.2.dist-info/RECORD,,