mirror of
https://github.com/MariaDB/server.git
synced 2025-01-30 18:41:56 +01:00
da37bfd8d6
Removing DEFAULT from INFORMATION_SCHEMA columns. DEFAULT in read-only tables is rather meaningless. Upgrade should go smoothly. Also fixes: MDEV-20254 Problems with EMPTY_STRING_IS_NULL and I_S tables
335 lines
15 KiB
Text
335 lines
15 KiB
Text
SHOW TABLES FROM information_schema LIKE 'SCHEMA_PRIVILEGES';
|
|
Tables_in_information_schema (SCHEMA_PRIVILEGES)
|
|
SCHEMA_PRIVILEGES
|
|
#######################################################################
|
|
# Testcase 3.2.1.1: INFORMATION_SCHEMA tables can be queried via SELECT
|
|
#######################################################################
|
|
DROP VIEW IF EXISTS test.v1;
|
|
DROP PROCEDURE IF EXISTS test.p1;
|
|
DROP FUNCTION IF EXISTS test.f1;
|
|
CREATE VIEW test.v1 AS SELECT * FROM information_schema.SCHEMA_PRIVILEGES;
|
|
CREATE PROCEDURE test.p1() SELECT * FROM information_schema.SCHEMA_PRIVILEGES;
|
|
CREATE FUNCTION test.f1() returns BIGINT
|
|
BEGIN
|
|
DECLARE counter BIGINT DEFAULT NULL;
|
|
SELECT COUNT(*) INTO counter FROM information_schema.SCHEMA_PRIVILEGES;
|
|
RETURN counter;
|
|
END//
|
|
# Attention: The printing of the next result sets is disabled.
|
|
SELECT * FROM information_schema.SCHEMA_PRIVILEGES;
|
|
SELECT * FROM test.v1;
|
|
CALL test.p1;
|
|
SELECT test.f1();
|
|
DROP VIEW test.v1;
|
|
DROP PROCEDURE test.p1;
|
|
DROP FUNCTION test.f1;
|
|
#########################################################################
|
|
# Testcase 3.2.15.1: INFORMATION_SCHEMA.SCHEMA_PRIVILEGES layout
|
|
#########################################################################
|
|
DESCRIBE information_schema.SCHEMA_PRIVILEGES;
|
|
Field Type Null Key Default Extra
|
|
GRANTEE varchar(190) NO NULL
|
|
TABLE_CATALOG varchar(512) NO NULL
|
|
TABLE_SCHEMA varchar(64) NO NULL
|
|
PRIVILEGE_TYPE varchar(64) NO NULL
|
|
IS_GRANTABLE varchar(3) NO NULL
|
|
SHOW CREATE TABLE information_schema.SCHEMA_PRIVILEGES;
|
|
Table Create Table
|
|
SCHEMA_PRIVILEGES CREATE TEMPORARY TABLE `SCHEMA_PRIVILEGES` (
|
|
`GRANTEE` varchar(190) NOT NULL,
|
|
`TABLE_CATALOG` varchar(512) NOT NULL,
|
|
`TABLE_SCHEMA` varchar(64) NOT NULL,
|
|
`PRIVILEGE_TYPE` varchar(64) NOT NULL,
|
|
`IS_GRANTABLE` varchar(3) NOT NULL
|
|
) ENGINE=MEMORY DEFAULT CHARSET=utf8
|
|
SHOW COLUMNS FROM information_schema.SCHEMA_PRIVILEGES;
|
|
Field Type Null Key Default Extra
|
|
GRANTEE varchar(190) NO NULL
|
|
TABLE_CATALOG varchar(512) NO NULL
|
|
TABLE_SCHEMA varchar(64) NO NULL
|
|
PRIVILEGE_TYPE varchar(64) NO NULL
|
|
IS_GRANTABLE varchar(3) NO NULL
|
|
SELECT GRANTEE, TABLE_CATALOG, TABLE_SCHEMA, PRIVILEGE_TYPE
|
|
FROM information_schema.schema_privileges WHERE table_catalog IS NOT NULL;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE
|
|
''@'%' def test SELECT
|
|
''@'%' def test INSERT
|
|
''@'%' def test UPDATE
|
|
''@'%' def test DELETE
|
|
''@'%' def test CREATE
|
|
''@'%' def test DROP
|
|
''@'%' def test REFERENCES
|
|
''@'%' def test INDEX
|
|
''@'%' def test ALTER
|
|
''@'%' def test CREATE TEMPORARY TABLES
|
|
''@'%' def test LOCK TABLES
|
|
''@'%' def test CREATE VIEW
|
|
''@'%' def test SHOW VIEW
|
|
''@'%' def test CREATE ROUTINE
|
|
''@'%' def test EVENT
|
|
''@'%' def test TRIGGER
|
|
''@'%' def test DELETE HISTORY
|
|
''@'%' def test\_% SELECT
|
|
''@'%' def test\_% INSERT
|
|
''@'%' def test\_% UPDATE
|
|
''@'%' def test\_% DELETE
|
|
''@'%' def test\_% CREATE
|
|
''@'%' def test\_% DROP
|
|
''@'%' def test\_% REFERENCES
|
|
''@'%' def test\_% INDEX
|
|
''@'%' def test\_% ALTER
|
|
''@'%' def test\_% CREATE TEMPORARY TABLES
|
|
''@'%' def test\_% LOCK TABLES
|
|
''@'%' def test\_% CREATE VIEW
|
|
''@'%' def test\_% SHOW VIEW
|
|
''@'%' def test\_% CREATE ROUTINE
|
|
''@'%' def test\_% EVENT
|
|
''@'%' def test\_% TRIGGER
|
|
''@'%' def test\_% DELETE HISTORY
|
|
###############################################################################
|
|
# Testcase 3.2.15.2-3.2.15.4 INFORMATION_SCHEMA.SCHEMA_PRIVILEGES accessibility
|
|
###############################################################################
|
|
DROP DATABASE IF EXISTS db_datadict_1;
|
|
DROP DATABASE IF EXISTS db_datadict_2;
|
|
DROP DATABASE IF EXISTS db_datadict_3;
|
|
CREATE DATABASE db_datadict_1;
|
|
CREATE DATABASE db_datadict_2;
|
|
CREATE DATABASE db_datadict_3;
|
|
CREATE TABLE db_datadict_2.t1(f1 INT, f2 INT, f3 INT)
|
|
ENGINE = MEMORY;
|
|
DROP USER 'testuser1'@'localhost';
|
|
CREATE USER 'testuser1'@'localhost';
|
|
DROP USER 'testuser2'@'localhost';
|
|
CREATE USER 'testuser2'@'localhost';
|
|
GRANT INSERT ON db_datadict_1.* TO 'testuser1'@'localhost';
|
|
GRANT INSERT ON db_datadict_2.t1 TO 'testuser1'@'localhost';
|
|
GRANT SELECT ON db_datadict_4.* TO 'testuser1'@'localhost' WITH GRANT OPTION;
|
|
GRANT SELECT ON db_datadict_3.* TO 'testuser2'@'localhost';
|
|
GRANT SELECT ON db_datadict_1.* TO 'testuser2'@'localhost';
|
|
connect testuser1, localhost, testuser1, , test;
|
|
GRANT SELECT ON db_datadict_4.* TO 'testuser2'@'localhost';
|
|
# Root granted INSERT db_datadict_1 to me -> visible
|
|
# Root granted SELECT db_datadict_1 to testuser2 -> invisible
|
|
# Root granted INSERT db_datadict_2.t1 (no schema-level priv!)
|
|
# but not db_datadict_2 to me -> invisible
|
|
# Root granted SELECT db_datadict_3. to testuser2 but not to me -> invisible
|
|
# Root granted SELECT db_datadict_4. to me -> visible
|
|
# I granted SELECT db_datadict_4. to testuser2 -> invisible (reality), visible(requirement)
|
|
# FIXME
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema LIKE 'db_datadict%'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict_1 INSERT NO
|
|
'testuser1'@'localhost' def db_datadict_4 SELECT YES
|
|
SHOW GRANTS FOR 'testuser1'@'localhost';
|
|
Grants for testuser1@localhost
|
|
GRANT USAGE ON *.* TO `testuser1`@`localhost`
|
|
GRANT INSERT ON `db_datadict_1`.* TO `testuser1`@`localhost`
|
|
GRANT SELECT ON `db_datadict_4`.* TO `testuser1`@`localhost` WITH GRANT OPTION
|
|
GRANT INSERT ON `db_datadict_2`.`t1` TO `testuser1`@`localhost`
|
|
SHOW GRANTS FOR 'testuser2'@'localhost';
|
|
ERROR 42000: Access denied for user 'testuser1'@'localhost' to database 'mysql'
|
|
connect testuser2, localhost, testuser2, , test;
|
|
# Root granted SELECT db_datadict_1 to me -> visible
|
|
# Root granted INSERT db_datadict_1 to testuser1 -> invisible
|
|
# Root granted INSERT db_datadict_2.t1 but not db_datadict_1 to testuser1 -> invisible
|
|
# Root granted SELECT db_datadict_3. to me -> visible
|
|
# testuser1 granted SELECT db_datadict_4. to me -> visible
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema LIKE 'db_datadict%'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser2'@'localhost' def db_datadict_1 SELECT NO
|
|
'testuser2'@'localhost' def db_datadict_3 SELECT NO
|
|
'testuser2'@'localhost' def db_datadict_4 SELECT NO
|
|
SHOW GRANTS FOR 'testuser1'@'localhost';
|
|
ERROR 42000: Access denied for user 'testuser2'@'localhost' to database 'mysql'
|
|
SHOW GRANTS FOR 'testuser2'@'localhost';
|
|
Grants for testuser2@localhost
|
|
GRANT USAGE ON *.* TO `testuser2`@`localhost`
|
|
GRANT SELECT ON `db_datadict_3`.* TO `testuser2`@`localhost`
|
|
GRANT SELECT ON `db_datadict_1`.* TO `testuser2`@`localhost`
|
|
GRANT SELECT ON `db_datadict_4`.* TO `testuser2`@`localhost`
|
|
connection default;
|
|
disconnect testuser1;
|
|
disconnect testuser2;
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema LIKE 'db_datadict%'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict_1 INSERT NO
|
|
'testuser1'@'localhost' def db_datadict_4 SELECT YES
|
|
'testuser2'@'localhost' def db_datadict_1 SELECT NO
|
|
'testuser2'@'localhost' def db_datadict_3 SELECT NO
|
|
'testuser2'@'localhost' def db_datadict_4 SELECT NO
|
|
SHOW GRANTS FOR 'testuser1'@'localhost';
|
|
Grants for testuser1@localhost
|
|
GRANT USAGE ON *.* TO `testuser1`@`localhost`
|
|
GRANT INSERT ON `db_datadict_1`.* TO `testuser1`@`localhost`
|
|
GRANT SELECT ON `db_datadict_4`.* TO `testuser1`@`localhost` WITH GRANT OPTION
|
|
GRANT INSERT ON `db_datadict_2`.`t1` TO `testuser1`@`localhost`
|
|
SHOW GRANTS FOR 'testuser2'@'localhost';
|
|
Grants for testuser2@localhost
|
|
GRANT USAGE ON *.* TO `testuser2`@`localhost`
|
|
GRANT SELECT ON `db_datadict_3`.* TO `testuser2`@`localhost`
|
|
GRANT SELECT ON `db_datadict_1`.* TO `testuser2`@`localhost`
|
|
GRANT SELECT ON `db_datadict_4`.* TO `testuser2`@`localhost`
|
|
DROP USER 'testuser1'@'localhost';
|
|
DROP USER 'testuser2'@'localhost';
|
|
DROP DATABASE db_datadict_1;
|
|
DROP DATABASE db_datadict_2;
|
|
DROP DATABASE db_datadict_3;
|
|
################################################################################
|
|
# 3.2.1.13+3.2.1.14+3.2.1.15: INFORMATION_SCHEMA.SCHEMA_PRIVILEGES modifications
|
|
################################################################################
|
|
DROP DATABASE IF EXISTS db_datadict;
|
|
CREATE DATABASE db_datadict;
|
|
DROP USER 'the_user'@'localhost';
|
|
DROP USER 'testuser1'@'localhost';
|
|
CREATE USER 'testuser1'@'localhost';
|
|
GRANT SELECT ON test.* TO 'testuser1'@'localhost';
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
connect testuser1, localhost, testuser1, , test;
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
connection default;
|
|
GRANT UPDATE ON db_datadict.* TO 'testuser1'@'localhost';
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict UPDATE NO
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict UPDATE NO
|
|
connection default;
|
|
GRANT SELECT ON db_datadict.* TO 'testuser1'@'localhost';
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT NO
|
|
'testuser1'@'localhost' def db_datadict UPDATE NO
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT NO
|
|
'testuser1'@'localhost' def db_datadict UPDATE NO
|
|
# Switch to connection default
|
|
connection default;
|
|
GRANT SELECT ON db_datadict.* TO 'testuser1'@'localhost' WITH GRANT OPTION;
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT YES
|
|
'testuser1'@'localhost' def db_datadict UPDATE YES
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT YES
|
|
'testuser1'@'localhost' def db_datadict UPDATE YES
|
|
connection default;
|
|
DROP SCHEMA db_datadict;
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT YES
|
|
'testuser1'@'localhost' def db_datadict UPDATE YES
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT YES
|
|
'testuser1'@'localhost' def db_datadict UPDATE YES
|
|
connection default;
|
|
REVOKE UPDATE ON db_datadict.* FROM 'testuser1'@'localhost';
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT YES
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'testuser1'@'localhost' def db_datadict SELECT YES
|
|
connection default;
|
|
RENAME USER 'testuser1'@'localhost' TO 'the_user'@'localhost';
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'the_user'@'localhost' def db_datadict SELECT YES
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'the_user'@'localhost' def db_datadict SELECT YES
|
|
disconnect testuser1;
|
|
connect the_user, localhost, the_user, , test;
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'the_user'@'localhost' def db_datadict SELECT YES
|
|
disconnect the_user;
|
|
connection default;
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
'the_user'@'localhost' def db_datadict SELECT YES
|
|
DROP USER 'the_user'@'localhost';
|
|
SELECT * FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict'
|
|
ORDER BY grantee,table_schema,privilege_type;
|
|
GRANTEE TABLE_CATALOG TABLE_SCHEMA PRIVILEGE_TYPE IS_GRANTABLE
|
|
########################################################################
|
|
# Testcases 3.2.1.3-3.2.1.5 + 3.2.1.8-3.2.1.12: INSERT/UPDATE/DELETE and
|
|
# DDL on INFORMATION_SCHEMA table are not supported
|
|
########################################################################
|
|
DROP DATABASE IF EXISTS db_datadict;
|
|
CREATE DATABASE db_datadict;
|
|
CREATE TABLE db_datadict.t1 (f1 BIGINT, f2 BIGINT)
|
|
ENGINE = <engine_type>;
|
|
DROP USER 'testuser1'@'localhost';
|
|
CREATE USER 'testuser1'@'localhost';
|
|
GRANT SELECT ON db_datadict.* TO 'testuser1'@'localhost';
|
|
INSERT INTO information_schema.schema_privileges
|
|
SELECT * FROM information_schema.schema_privileges;
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
UPDATE information_schema.schema_privileges SET table_schema = 'test'
|
|
WHERE table_name = 't1';
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
DELETE FROM information_schema.schema_privileges
|
|
WHERE table_schema = 'db_datadict';
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
TRUNCATE information_schema.schema_privileges;
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
CREATE INDEX my_idx_on_tables
|
|
ON information_schema.schema_privileges(table_schema);
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
ALTER TABLE information_schema.schema_privileges ADD f1 INT;
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
DROP TABLE information_schema.schema_privileges;
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
ALTER TABLE information_schema.schema_privileges
|
|
RENAME db_datadict.schema_privileges;
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
ALTER TABLE information_schema.schema_privileges
|
|
RENAME information_schema.xschema_privileges;
|
|
ERROR 42000: Access denied for user 'root'@'localhost' to database 'information_schema'
|
|
DROP DATABASE db_datadict;
|
|
DROP USER 'testuser1'@'localhost';
|