Porting back security fix from 4.0.

All tests plus grant.pl test passed.
This commit is contained in:
unknown 2003-04-29 18:24:33 +03:00
commit 4845193d43

View file

@ -1878,8 +1878,9 @@ insert_fields(THD *thd,TABLE_LIST *tables, const char *db_name,
for (; tables ; tables=tables->next)
{
TABLE *table=tables->table;
if (grant_option && !thd->master_access &&
check_grant_all_columns(thd,SELECT_ACL,table) )
if (grant_option && !(table->grant.privilege &
table->grant.want_privilege) &&
check_grant_all_columns(thd,SELECT_ACL,table))
DBUG_RETURN(-1);
if (!table_name || (!strcmp(table_name,tables->alias) &&
(!db_name || !tables->db ||