mirror of
https://github.com/MariaDB/server.git
synced 2026-04-24 09:15:30 +02:00
720252532f
allows SHOW CREATE TABLE) from 6.0. Original revisions:
------------------------------------------------------------
revno: 2617.31.8
committer: Alexander Nozdrin <alik@sun.com>
branch nick: 6.0-rt-bug38347
timestamp: Thu 2009-03-26 09:08:24 +0300
message:
Patch for Bug#38347: ALTER ROUTINE privilege allows SHOW CREATE TABLE.
If a user has any of the following privileges for a table (or the database
if the table), he should be able to issue SHOW CREATE TABLE for the table:
- CREATE
- DROP
- ALTER
- DELETE
- INDEX
- INSERT
- SELECT
- UPDATE
- TRIGGER
- REFERENCES
- GRANT OPTION
- CREATE VIEW
- SHOW VIEW
Any other privilege (even SUPER) should not allow SHOW CREATE TABLE.
------------------------------------------------------------
revno: 2617.31.11
committer: Alexander Nozdrin <alik@sun.com>
branch nick: 6.0-rt
timestamp: Fri 2009-03-27 21:36:34 +0300
message:
Additional patch for Bug#38347 (ALTER ROUTINE privilege
allows SHOW CREATE TABLE).
The problem was that information_schema.test,
information_schema_parameters.test and information_schema_routines.test
failed with the first patch. That happened due to limitation in check_access():
it allows only SELECT_ACL privilege for INFORMATION_SCHEMA tables.
The patch is to request only SELECT_ACL privilege for INFORMATION_SCHEMA tables.
------------------------------------------------------------
21 lines
404 B
PHP
21 lines
404 B
PHP
|
|
--echo
|
|
SHOW GRANTS FOR mysqltest_u1@localhost;
|
|
|
|
--echo
|
|
--echo # connection: con1 (mysqltest_u1@mysqltest_db1)
|
|
--connect (con1,localhost,mysqltest_u1,,mysqltest_db1)
|
|
--connection con1
|
|
|
|
--echo
|
|
SHOW CREATE TABLE t1;
|
|
|
|
--echo
|
|
--echo # connection: default
|
|
--connection default
|
|
|
|
--disconnect con1
|
|
|
|
--echo
|
|
REVOKE ALL PRIVILEGES, GRANT OPTION FROM mysqltest_u1@localhost;
|
|
SHOW GRANTS FOR mysqltest_u1@localhost;
|