Bug #10734 Grant of privileges other than 'select' and 'create view' should fail on schema
| Submitted: | 19 May 2005 10:53 | Modified: | 15 Sep 2005 18:38 |
|---|---|---|---|
| Reporter: | Disha | Email Updates: | |
| Status: | Closed | Impact on me: | |
| Category: | MySQL Server | Severity: | S3 (Non-critical) |
| Version: | 5.0.5-beta-nt | OS: | Windows (Windows xp) |
| Assigned to: | Sergei Glukhov | CPU Architecture: | Any |
[20 May 2005 7:30]
Vasily Kishkin
Could you please explane me why you use "grant" instead of "revoke" ? As far as I can understand you enable all grant privileges to u_6_40402
[28 May 2005 6:19]
Vasily Kishkin
Sorry...I did't understand the problem first time. I was not right.
[13 Sep 2005 11:08]
Sergei Glukhov
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/internals/29725
[14 Sep 2005 8:33]
Sergei Glukhov
Fixed in 5.0.13
[15 Sep 2005 18:38]
Paul DuBois
Noted in 5.0.13 changelog.
Portions of this website are copyright © 2001, 2002 The PHP Group
Page generated in 0.056 sec. using MySQL 8.4.7-u6-cloud
Timestamp references displayed by the system are UTC.
Content reproduced on this site is the property of the
respective copyright holders.
It is not reviewed in advance
by Oracle and does not necessarily represent the opinion of
Oracle or any other party.
Description: Information_schma database privileges are allowed when loged as user 'root'. How to repeat: 1. execute the following command. delimiter // Drop user 'u_6_40402'@'localhost' // create user 'u_6_40402'@'localhost'// grant all on information_schema.* to 'u_6_40402'@'localhost'// grant alter on information_schema.* to 'u_6_40402'@'localhost'// grant alter routine on information_schema.* to 'u_6_40402'@'localhost'// grant create routine on information_schema.* to 'u_6_40402'@'localhost'// grant delete on information_schema.* to 'u_6_40402'@'localhost'// grant drop on information_schema.* to 'u_6_40402'@'localhost'// grant execute on information_schema.* to 'u_6_40402'@'localhost'// grant index on information_schema.* to 'u_6_40402'@'localhost'// grant insert on information_schema.* to 'u_6_40402'@'localhost'// grant lock tables on information_schema.* to 'u_6_40402'@'localhost'// grant references on information_schema.* to 'u_6_40402'@'localhost'// grant show view on information_schema.* to 'u_6_40402'@'localhost'// grant update on information_schema.* to 'u_6_40402'@'localhost'// grant usage on information_schema.* to 'u_6_40402'@'localhost'// grant grant option on information_schema.* to 'u_6_40402'@'localhost'// 2. Expected Result: It should not allow to grant privileges other than 'select' and 'create view' 3. Actual Result: It is allowing almost all privileges with some execeptions.