mirror of
https://github.com/MariaDB/server.git
synced 2025-01-30 18:41:56 +01:00
46 lines
1.8 KiB
Text
46 lines
1.8 KiB
Text
SET @global=@@global.secure_auth;
|
|
#
|
|
# MDEV-21961 Bind CONNECTION ADMIN to a number of global system variables
|
|
#
|
|
# Test that "SET secure_auth" is not allowed without CONNECTION ADMIN or SUPER
|
|
CREATE USER user1@localhost;
|
|
GRANT ALL PRIVILEGES ON *.* TO user1@localhost;
|
|
REVOKE CONNECTION ADMIN, SUPER ON *.* FROM user1@localhost;
|
|
connect user1,localhost,user1,,;
|
|
connection user1;
|
|
SET GLOBAL secure_auth=1;
|
|
ERROR 42000: Access denied; you need (at least one of) the SUPER, CONNECTION ADMIN privilege(s) for this operation
|
|
SET secure_auth=1;
|
|
ERROR HY000: Variable 'secure_auth' is a GLOBAL variable and should be set with SET GLOBAL
|
|
SET SESSION secure_auth=1;
|
|
ERROR HY000: Variable 'secure_auth' is a GLOBAL variable and should be set with SET GLOBAL
|
|
disconnect user1;
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
# Test that "SET secure_auth" is allowed with CONNECTION ADMIN
|
|
CREATE USER user1@localhost;
|
|
GRANT CONNECTION ADMIN ON *.* TO user1@localhost;
|
|
connect user1,localhost,user1,,;
|
|
connection user1;
|
|
SET GLOBAL secure_auth=1;
|
|
SET secure_auth=1;
|
|
ERROR HY000: Variable 'secure_auth' is a GLOBAL variable and should be set with SET GLOBAL
|
|
SET SESSION secure_auth=1;
|
|
ERROR HY000: Variable 'secure_auth' is a GLOBAL variable and should be set with SET GLOBAL
|
|
disconnect user1;
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
# Test that "SET secure_auth" is allowed with SUPER
|
|
CREATE USER user1@localhost;
|
|
GRANT SUPER ON *.* TO user1@localhost;
|
|
connect user1,localhost,user1,,;
|
|
connection user1;
|
|
SET GLOBAL secure_auth=1;
|
|
SET secure_auth=1;
|
|
ERROR HY000: Variable 'secure_auth' is a GLOBAL variable and should be set with SET GLOBAL
|
|
SET SESSION secure_auth=1;
|
|
ERROR HY000: Variable 'secure_auth' is a GLOBAL variable and should be set with SET GLOBAL
|
|
disconnect user1;
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
SET @@global.secure_auth=@global;
|