mirror of
https://github.com/MariaDB/server.git
synced 2025-01-18 21:12:26 +01:00
127 lines
5.1 KiB
Text
127 lines
5.1 KiB
Text
# Test of GRANT commands
|
|
|
|
# Cleanup
|
|
--disable_warnings
|
|
drop table if exists t1;
|
|
--enable_warnings
|
|
|
|
#
|
|
# Test that SSL options works properly
|
|
#
|
|
|
|
delete from mysql.user where user='mysqltest_1';
|
|
delete from mysql.db where user='mysqltest_1';
|
|
flush privileges;
|
|
grant select on mysqltest.* to mysqltest_1@localhost require cipher "EDH-RSA-DES-CBC3-SHA";
|
|
show grants for mysqltest_1@localhost;
|
|
grant delete on mysqltest.* to mysqltest_1@localhost;
|
|
select * from mysql.user where user="mysqltest_1";
|
|
show grants for mysqltest_1@localhost;
|
|
revoke delete on mysqltest.* from mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
grant select on mysqltest.* to mysqltest_1@localhost require NONE;
|
|
show grants for mysqltest_1@localhost;
|
|
grant USAGE on mysqltest.* to mysqltest_1@localhost require cipher "EDH-RSA-DES-CBC3-SHA" AND SUBJECT "testsubject" ISSUER "MySQL AB";
|
|
show grants for mysqltest_1@localhost;
|
|
revoke all privileges on mysqltest.* from mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
delete from mysql.user where user='mysqltest_1';
|
|
flush privileges;
|
|
|
|
#
|
|
# Test that the new db privileges are stored/retrieved correctly
|
|
#
|
|
|
|
grant CREATE TEMPORARY TABLES, LOCK TABLES on mysqltest.* to mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
flush privileges;
|
|
show grants for mysqltest_1@localhost;
|
|
revoke CREATE TEMPORARY TABLES on mysqltest.* from mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
grant ALL PRIVILEGES on mysqltest.* to mysqltest_1@localhost with GRANT OPTION;
|
|
flush privileges;
|
|
show grants for mysqltest_1@localhost;
|
|
revoke LOCK TABLES, ALTER on mysqltest.* from mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
revoke all privileges on mysqltest.* from mysqltest_1@localhost;
|
|
delete from mysql.user where user='mysqltest_1';
|
|
flush privileges;
|
|
grant usage on test.* to mysqltest_1@localhost with grant option;
|
|
show grants for mysqltest_1@localhost;
|
|
delete from mysql.user where user='mysqltest_1';
|
|
delete from mysql.db where user='mysqltest_1';
|
|
delete from mysql.tables_priv where user='mysqltest_1';
|
|
delete from mysql.columns_priv where user='mysqltest_1';
|
|
flush privileges;
|
|
|
|
#
|
|
# Test what happens when you have same table and colum level grants
|
|
#
|
|
|
|
create table t1 (a int);
|
|
GRANT select,update,insert on t1 to mysqltest_1@localhost;
|
|
GRANT select (a), update (a),insert(a), references(a) on t1 to mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
select table_priv,column_priv from mysql.tables_priv where user="mysqltest_1";
|
|
REVOKE select (a), update on t1 from mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
REVOKE select,update,insert,insert (a) on t1 from mysqltest_1@localhost;
|
|
show grants for mysqltest_1@localhost;
|
|
GRANT select,references on t1 to mysqltest_1@localhost;
|
|
select table_priv,column_priv from mysql.tables_priv where user="mysqltest_1";
|
|
grant all on test.* to mysqltest_3@localhost with grant option;
|
|
revoke all on test.* from mysqltest_3@localhost;
|
|
show grants for mysqltest_3@localhost;
|
|
revoke grant option on test.* from mysqltest_3@localhost;
|
|
show grants for mysqltest_3@localhost;
|
|
grant all on test.t1 to mysqltest_2@localhost with grant option;
|
|
revoke all on test.t1 from mysqltest_2@localhost;
|
|
show grants for mysqltest_2@localhost;
|
|
revoke grant option on test.t1 from mysqltest_2@localhost;
|
|
show grants for mysqltest_2@localhost;
|
|
delete from mysql.user where user='mysqltest_1' or user="mysqltest_2" or user="mysqltest_3";
|
|
delete from mysql.db where user='mysqltest_1' or user="mysqltest_2" or user="mysqltest_3";
|
|
delete from mysql.tables_priv where user='mysqltest_1' or user="mysqltest_2" or user="mysqltest_3";
|
|
delete from mysql.columns_priv where user='mysqltest_1' or user="mysqltest_2" or user="mysqltest_3";
|
|
flush privileges;
|
|
drop table t1;
|
|
|
|
#
|
|
# Test some error conditions
|
|
#
|
|
--error 1221
|
|
GRANT FILE on mysqltest.* to mysqltest_1@localhost;
|
|
select 1; -- To test that the previous command didn't cause problems
|
|
|
|
#
|
|
# Test for 'drop user', 'revoke privileges, grant'
|
|
#
|
|
|
|
create table t1 (a int);
|
|
grant ALL PRIVILEGES on *.* to drop_user2@localhost with GRANT OPTION;
|
|
show grants for drop_user2@localhost;
|
|
revoke all privileges, grant from drop_user2@localhost;
|
|
drop user drop_user2@localhost;
|
|
|
|
grant ALL PRIVILEGES on *.* to drop_user@localhost with GRANT OPTION;
|
|
grant ALL PRIVILEGES on test.* to drop_user@localhost with GRANT OPTION;
|
|
grant select(a) on test.t1 to drop_user@localhost;
|
|
show grants for drop_user@localhost;
|
|
revoke all privileges, grant from drop_user@localhost;
|
|
show grants for drop_user@localhost;
|
|
drop user drop_user@localhost;
|
|
--error 1268
|
|
revoke all privileges, grant from drop_user@localhost;
|
|
|
|
grant select(a) on test.t1 to drop_user1@localhost;
|
|
grant select on test.t1 to drop_user2@localhost;
|
|
grant select on test.* to drop_user3@localhost;
|
|
grant select on *.* to drop_user4@localhost;
|
|
--error 1267
|
|
drop user drop_user1@localhost, drop_user2@localhost, drop_user3@localhost,
|
|
drop_user4@localhost;
|
|
revoke all privileges, grant from drop_user1@localhost, drop_user2@localhost,
|
|
drop_user3@localhost, drop_user4@localhost;
|
|
drop user drop_user1@localhost, drop_user2@localhost, drop_user3@localhost,
|
|
drop_user4@localhost;
|
|
drop table t1;
|