Bug #15298 | SHOW GRANTS FOR CURRENT_USER: Incorrect output in DEFINER context | ||
---|---|---|---|
Submitted: | 28 Nov 2005 20:37 | Modified: | 7 Jul 2006 19:22 |
Reporter: | Paul DuBois | Email Updates: | |
Status: | Closed | Impact on me: | |
Category: | MySQL Server | Severity: | S3 (Non-critical) |
Version: | 5.0.16/5.0.17 BK | OS: | Linux (Linux) |
Assigned to: | Sergei Glukhov | CPU Architecture: | Any |
[28 Nov 2005 20:37]
Paul DuBois
[20 Jun 2006 10:59]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/7912
[27 Jun 2006 8:44]
Alexander Barkov
The patch generally looks ok to push. I'd suggest to put somewhere in the code a comment that an empty LEX_USER now means CURRENT_USER. Maybe even in two places: sql_yacc.yy and before implementation of get_cuttent_user() in sql_parse.cc. Please push after adding a comment. Also, please write more comments on individual files in the future.
[29 Jun 2006 10:47]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/8473
[3 Jul 2006 11:32]
Sergei Glukhov
Fixed in 5.0.24
[7 Jul 2006 19:22]
Paul DuBois
Noted in 5.0.24, 5.1.12 changelogs. SHOW GRANTS FOR CURRENT_USER did not return definer grants when executed in DEFINER context (such as within a stored prodedure defined with SQL SECURITY DEFINER), it returned the invoker grants.
[13 Jul 2006 3:34]
Paul DuBois
5.0.x fix went to 5.0.25 instead.