Description:
MySQL 5.6 has introduced an inconsistency in whether SHOW GRANTS quotes user/host pairs using single quotes or backticks.
This is the (parsed) output from a test I have that creates a temporary 5.6.27-log server and does a SHOW GRANTS command:
'GRANT SELECT, INSERT ON `a_base`.* TO `user`@`host` IDENTIFIED BY PASSWORD \'*password\' WITH GRANT OPTION',
'GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD ON `mybase`.* TO `user`@`host` IDENTIFIED BY PASSWORD \'*password\' WITH GRANT OPTION',
'GRANT SELECT ON *.* TO `user`@`host` IDENTIFIED BY PASSWORD \'*password\' WITH GRANT OPTION',
'GRANT EXECUTE ON PROCEDURE `test`.`myproc` TO \'user\'@\'host\''
Notice the inconsistency.
I’m marking this one Serious because we have parsing code that is breaking on the inconsistency.
How to repeat:
It’s inconsistent, but it seems to depend on whether there are different kinds of user/host/password setups?
Suggested fix:
It should always use single quotes. That’s what’s been documented for years, and that’s what applications expect.
Description: MySQL 5.6 has introduced an inconsistency in whether SHOW GRANTS quotes user/host pairs using single quotes or backticks. This is the (parsed) output from a test I have that creates a temporary 5.6.27-log server and does a SHOW GRANTS command: 'GRANT SELECT, INSERT ON `a_base`.* TO `user`@`host` IDENTIFIED BY PASSWORD \'*password\' WITH GRANT OPTION', 'GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD ON `mybase`.* TO `user`@`host` IDENTIFIED BY PASSWORD \'*password\' WITH GRANT OPTION', 'GRANT SELECT ON *.* TO `user`@`host` IDENTIFIED BY PASSWORD \'*password\' WITH GRANT OPTION', 'GRANT EXECUTE ON PROCEDURE `test`.`myproc` TO \'user\'@\'host\'' Notice the inconsistency. I’m marking this one Serious because we have parsing code that is breaking on the inconsistency. How to repeat: It’s inconsistent, but it seems to depend on whether there are different kinds of user/host/password setups? Suggested fix: It should always use single quotes. That’s what’s been documented for years, and that’s what applications expect.