Bug #3408 multi update require UPDATE privelege for all tables
Submitted: 7 Apr 2004 1:26 Modified: 18 Apr 2004 9:28
Reporter: Oleksandr Byelkin Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Server Severity:S2 (Serious)
Version:4.1 OS:Any (all)
Assigned to: Oleksandr Byelkin CPU Architecture:Any

[7 Apr 2004 1:26] Oleksandr Byelkin
Description:
multi update require UPDATE privelege for all tables 

How to repeat:
connect (root,localhost,root,,test,$MASTER_MYPORT,master.sock); 
connection root; 
--disable_warnings 
create database mysqltest; 
--enable_warnings 
create table mysqltest.t1 (a int, b int, primary key (a)); 
create table mysqltest.t2 (a int, b int, primary key (a)); 
create table mysqltest.t3 (a int, b int, primary key (a)); 
grant select on mysqltest.* to mysqltest_1@localhost; 
grant update on mysqltest.t1 to mysqltest_1@localhost; 
grant update on mysqltest.t2 to mysqltest_1@localhost; 
connect (user1,localhost,mysqltest_1,,mysqltest,$MASTER_MYPORT,master.sock); 
connection user1; 
update t1, t2 set t1.b=1 where t1.a=t2.a; 
update t1, t2 set t1.b=(select b from t3 where t1.a=t3.a) where t1.a=t2.a; 
connection root; 
revoke all privileges on mysqltest.t1 from mysqltest_1@localhost; 
delete from mysql.user where user='mysqltest_1'; 
drop database mysqltest;
[7 Apr 2004 14:23] Oleksandr Byelkin
ChangeSet 
  1.1773 04/04/08 00:16:17 bell@sanja.is.com.ua +39 -0 
  new error for unsupported command in PS 
  fixed IN subselect with basic constant left expression 
  SQLCOM_CREATE_TABLE, SQLCOM_UPDATE_MULTI, SQLCOM_REPLACE_SELECT, 
SQLCOM_INSERT_SELECT, QLCOM_DELETE_MULTI fixed to be compatible with PS 
(BUG#3398, BUG#3406) 
  fixed multiupdate privelege check (BUG#3408) 
  fixed multiupdate tables check (BUG#3411) 
  unchecked commands now is rejected by PS protocol to avoid serever crash 
  fixed cleunup procedure to be compatible sith DO/SET (BUG#3393)
[18 Apr 2004 9:28] Oleksandr Byelkin
pushed