mirror of
https://github.com/MariaDB/server.git
synced 2025-01-17 20:42:30 +01:00
d2dddbff4e
- Used single quotes, back quotes are used with commit
fafb35ee51 in 10.3 and will be changed.
Reviewed by: serg@mariadb.org
60 lines
1.7 KiB
Text
60 lines
1.7 KiB
Text
#
|
|
# MDEV-10744 Roles are not fully case-sensitive
|
|
#
|
|
#
|
|
# Test creating two case-different roles.
|
|
#
|
|
create user test_user@'%';
|
|
create role test_ROLE;
|
|
create role test_role;
|
|
#
|
|
# Test if mysql.user has the roles created.
|
|
#
|
|
select user, host from mysql.user where is_role='y' and user like 'test%';
|
|
user host
|
|
test_ROLE
|
|
test_role
|
|
create database secret_db;
|
|
create table secret_db.t1 (secret varchar(100));
|
|
insert into secret_db.t1 values ("Some Secret P4ssw0rd");
|
|
grant select on secret_db.* to test_role;
|
|
grant test_role to test_user;
|
|
show grants for test_user;
|
|
Grants for test_user@%
|
|
GRANT 'test_role' TO 'test_user'@'%'
|
|
GRANT USAGE ON *.* TO 'test_user'@'%'
|
|
#
|
|
# Now test the UPPER case role.
|
|
#
|
|
grant test_ROLE to test_user;
|
|
grant insert on secret_db.t1 to test_ROLE;
|
|
show grants for test_user;
|
|
Grants for test_user@%
|
|
GRANT 'test_role' TO 'test_user'@'%'
|
|
GRANT 'test_ROLE' TO 'test_user'@'%'
|
|
GRANT USAGE ON *.* TO 'test_user'@'%'
|
|
connect test_user,localhost,test_user;
|
|
#
|
|
# Test users privileges when interacting with those roles;
|
|
#
|
|
show tables from secret_db;
|
|
ERROR 42000: Access denied for user 'test_user'@'%' to database 'secret_db'
|
|
set role test_ROLE;
|
|
show tables from secret_db;
|
|
Tables_in_secret_db
|
|
t1
|
|
select * from secret_db.t1;
|
|
ERROR 42000: SELECT command denied to user 'test_user'@'localhost' for table 't1'
|
|
insert into secret_db.t1 values ("|-|4><");
|
|
set role test_role;
|
|
select * from secret_db.t1 order by secret;
|
|
secret
|
|
Some Secret P4ssw0rd
|
|
|-|4><
|
|
insert into secret_db.t1 values ("|_33T|-|4><");
|
|
ERROR 42000: INSERT command denied to user 'test_user'@'localhost' for table 't1'
|
|
connection default;
|
|
drop role test_ROLE;
|
|
drop role test_role;
|
|
drop user test_user;
|
|
drop database secret_db;
|