Revision 7759260d pithos/backends/lib/sqlite/permissions.py

b/pithos/backends/lib/sqlite/permissions.py
123 123
             "using (feature_id)")
124 124
        p = (member, member)
125 125
        if prefix:
126
            q += " where path like ?"
127
            p += (prefix + '%',)
126
            q += " where path like ? escape '\\'"
127
            p += (self.escape_like(prefix) + '%',)
128 128
        self.execute(q, p)
129 129
        return [r[0] for r in self.fetchall()]
130 130
    
131 131
    def access_list_shared(self, prefix=''):
132 132
        """Return the list of shared paths."""
133 133
        
134
        q = "select path from xfeatures where path like ?"
135
        self.execute(q, (prefix + '%',))
134
        q = "select path from xfeatures where path like ? escape '\\'"
135
        self.execute(q, (self.escape_like(prefix) + '%',))
136 136
        return [r[0] for r in self.fetchall()]

Also available in: Unified diff