Bug #6030 Stored procedure has no appropriate DROP privilege

• Submitted: 11 Oct 2004 13:45
• Modified: 22 Oct 2004 18:37
• Reporter: Peter Gulutzan
• Status: Closed
• Category: MySQL Server
• Severity: S3 (Non-critical)
• Version: 5.0.2-alpha-debug
• OS: Linux (SuSE 8.2)
• Assigned to: Per-Erik Martin
• CPU Architecture: Any

[11 Oct 2004 13:45] Peter Gulutzan

Description:
There is no privilege check for DROP PROCEDURE or DROP FUNCTION. 

How to repeat:
User 'root' says: CREATE PROCEDURE p0 () SET @x = 5// 
> >     User 'root' says: GRANT SELECT ON db50.* TO pete// 
> >     /* db50 is the current database. pete has no other privileges */ 
> >     User 'pete' says: DROP PROCEDURE p0// 
> >     MySQL says okay.

[11 Oct 2004 18:56] MySQL Verification Team

Verified with 5.0.2-alpha-debug-log

[22 Oct 2004 18:37] Per-Erik Martin

Thank you for your bug report. This issue has been committed to our
source repository of that product and will be incorporated into the
next release.

If necessary, you can access the source repository and build the latest
available version, including the bugfix, yourself. More information 
about accessing the source trees is available at
    http://www.mysql.com/doc/en/Installing_source_tree.html