Bug #6030 Stored procedure has no appropriate DROP privilege
Submitted: 11 Oct 2004 13:45 Modified: 22 Oct 2004 18:37
Reporter: Peter Gulutzan Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Server Severity:S3 (Non-critical)
Version:5.0.2-alpha-debug OS:Linux (SuSE 8.2)
Assigned to: Bugs System CPU Architecture:Any

[11 Oct 2004 13:45] Peter Gulutzan
Description:
There is no privilege check for DROP PROCEDURE or DROP FUNCTION. 

How to repeat:
User 'root' says: CREATE PROCEDURE p0 () SET @x = 5// 
> >     User 'root' says: GRANT SELECT ON db50.* TO pete// 
> >     /* db50 is the current database. pete has no other privileges */ 
> >     User 'pete' says: DROP PROCEDURE p0// 
> >     MySQL says okay.
[11 Oct 2004 18:56] Victoria Reznichenko
Verified with 5.0.2-alpha-debug-log
[22 Oct 2004 18:37] Per-Erik Martin
Thank you for your bug report. This issue has been committed to our
source repository of that product and will be incorporated into the
next release.

If necessary, you can access the source repository and build the latest
available version, including the bugfix, yourself. More information 
about accessing the source trees is available at
    http://www.mysql.com/doc/en/Installing_source_tree.html