mirror/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2026-05-05 06:35:33 +02:00
Code Issues Projects Releases Packages Wiki Activity

Bug#45412 SHOW CREATE TRIGGER does not require privileges to disclose trigger data

Browse source 
Added privilege checking to SHOW CREATE TRIGGER code.



mysql-test/r/trigger_notembedded.result:
  test result
mysql-test/t/trigger_notembedded.test:
  test case
sql/sql_show.cc:
  Added privilege checking to SHOW CREATE TRIGGER code.
This commit is contained in:
Sergey Glukhov 2009-06-25 15:52:50 +05:00
commit 5eab9716ba
3 changed files with 43 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
sql/sql_show.cc
View file

@ -7071,6 +7071,12 @@ bool show_create_trigger(THD *thd, const sp_name *trg_name)
if (!lst)
return TRUE;
if (check_table_access(thd, TRIGGER_ACL, lst, 1, TRUE))
{
my_error(ER_SPECIFIC_ACCESS_DENIED_ERROR, MYF(0), "TRIGGER");
return TRUE;
}
/*
Open the table by name in order to load Table_triggers_list object.