mirror of
https://github.com/MariaDB/server.git
synced 2025-10-09 01:09:15 +02:00
eeb00ceffd
Follow-up patch with adjustments of test files and updates of result files for tests. Some of tests were rewritten slighlty. Everywhere where common pattern used: ----- CREATE USER userA; --connect con1 ... userA ... <sql statements...> --disconnect con1 DROP USER userA; ----- the DROP USER statement has been eclosed into the directive --disable_warnings --enable_warnings This change is caused by the race conddition between --disconnect and DROP USER since a number of currently running sessions established on behalf the user being dropped is counted by holding the rw_lock THD_list_iterator::lock that is not acquired on execution the DROP USER statement but the lock is taken as the last step on handling disconnection (when the client is already sending the next statement). Therefore, for the cases where the command --disconnect precedes the DROP USER statement we hide the possible warnings about presence of active sessions for the user being deleted to make tests deterministic.
58 lines
2.5 KiB
Text
58 lines
2.5 KiB
Text
set local sql_mode="";
|
|
set global sql_mode="";
|
|
#
|
|
# Tests for checking permission denied on CREATE OR REPLACE if DROP
|
|
# access is revoked
|
|
#
|
|
# These statements do not need special tests for CREATE OR REPLACE,
|
|
# because they do not have separate permissions for create and drop:
|
|
# CREATE OR REPLACE EVENT (uses EVENT_ACL for both CREATE and DROP)
|
|
# CREATE OR DROP SERVER (uses SUPER_ALC for both CREATE and DROP)
|
|
# CREATE OR DROP TRIGGER (uses TRIGGER_ACL for both CREATE and DROP)
|
|
SELECT CURRENT_USER;
|
|
CURRENT_USER
|
|
root@localhost
|
|
CREATE DATABASE db1;
|
|
GRANT ALL ON db1.* TO mysqltest_1@localhost;
|
|
REVOKE DROP ON db1.* FROM mysqltest_1@localhost;
|
|
REVOKE ALTER ROUTINE ON db1.* FROM mysqltest_1@localhost;
|
|
GRANT DELETE ON mysql.* TO mysqltest_1@localhost;
|
|
REVOKE DELETE ON mysql.* FROM mysqltest_1@localhost;
|
|
FLUSH PRIVILEGES;
|
|
connect user_a, localhost, mysqltest_1,,;
|
|
connection user_a;
|
|
SELECT CURRENT_USER;
|
|
CURRENT_USER
|
|
mysqltest_1@localhost
|
|
CREATE DATABASE db1;
|
|
ERROR HY000: Can't create database 'db1'; database exists
|
|
CREATE OR REPLACE DATABASE db1;
|
|
ERROR 42000: Access denied for user 'mysqltest_1'@'localhost' to database 'db1'
|
|
CREATE OR REPLACE DATABASE db2;
|
|
ERROR 42000: Access denied for user 'mysqltest_1'@'localhost' to database 'db2'
|
|
USE db1;
|
|
CREATE OR REPLACE TABLE t1(id INT);
|
|
ERROR 42000: DROP command denied to user 'mysqltest_1'@'localhost' for table `db1`.`t1`
|
|
CREATE OR REPLACE PROCEDURE proc1 (OUT cnt INT) BEGIN END;
|
|
ERROR 42000: alter routine command denied to user 'mysqltest_1'@'localhost' for routine 'db1.proc1'
|
|
CREATE OR REPLACE FUNCTION lookup RETURNS STRING SONAME "UDF_EXAMPLE_LIB";
|
|
ERROR 42000: Access denied for user 'mysqltest_1'@'localhost' to database 'mysql'
|
|
CREATE OR REPLACE FUNCTION hello(str char(20)) RETURNS TEXT RETURN CONCAT('Hello, ', str, '!');
|
|
ERROR 42000: alter routine command denied to user 'mysqltest_1'@'localhost' for routine 'db1.hello'
|
|
CREATE OR REPLACE USER u1@localhost;
|
|
ERROR 42000: Access denied; you need (at least one of) the CREATE USER privilege(s) for this operation
|
|
CREATE OR REPLACE ROLE developer;
|
|
ERROR 42000: Access denied; you need (at least one of) the CREATE USER privilege(s) for this operation
|
|
connection default;
|
|
SELECT CURRENT_USER;
|
|
CURRENT_USER
|
|
root@localhost
|
|
REVOKE ALL ON db1.* FROM mysqltest_1@localhost;
|
|
DROP DATABASE IF EXISTS db2;
|
|
Warnings:
|
|
Note 1008 Can't drop database 'db2'; database doesn't exist
|
|
DROP DATABASE db1;
|
|
DROP USER mysqltest_1@localhost;
|
|
Warnings:
|
|
Note 4226 Dropped users ['mysqltest_1'@'localhost'] have active connections. Use KILL CONNECTION if they should not be used anymore.
|
|
set global sql_mode=default;
|