MySQL Bugs: #10962: Information Schema:Can grant privileges other than SELECT on data dictionary

Bug #10962	Information Schema:Can grant privileges other than SELECT on data dictionary
Submitted:	30 May 2005 14:11	Modified:	31 May 2005 16:44
Reporter:	Disha	Email Updates:
Status:	Duplicate	Impact on me:	None
Category:	MySQL Server	Severity:	S2 (Serious)
Version:	5.0.5 - Beta	OS:	Any (ALL)
Assigned to:		CPU Architecture:	Any

Description:
Privileges other than SELECT can be granted on the read-only INFORMATION_SCHEMA database.

How to repeat:
Repro Steps:

1. create user test1//
2. grant alter, insert, update on information_schema.* to test1//

Expected Result:
Granting of privileges other than SELECT on information_schema database should fail with an appropriate error.

Actual Result:
The privileges can be granted with out any error

Additional Info:
The granted permissions do not have any effect and no information_schema object can be altered by the user.

mysql> show grants for test1//
+----------------------------------------------------------------------+
| Grants for test1@%                                                   |
+----------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'test1'@'%'                                    |
| GRANT INSERT, UPDATE, ALTER ON `information_schema`.* TO 'test1'@'%' |
+----------------------------------------------------------------------+
2 rows in set (0.00 sec)

Please do not submit the same bug more than once. An existing
bug report already describes this very problem. Even if you feel
that your issue is somewhat different, the resolution is likely
to be the same. Because of this, we hope you add your comments
to the original bug instead.

Thank you for your interest in MySQL.

Additional info:

http://bugs.mysql.com/bug.php?id=10734