Bug #79314 HELP not allowed in sandbox
Submitted: 17 Nov 2015 14:08 Modified: 18 Nov 2015 4:15
Reporter: Daniël van Eeden (OCA) Email Updates:
Status: Verified Impact on me:
None 
Category:MySQL Server: Security: Privileges Severity:S3 (Non-critical)
Version:5.7.9, 5.6.29 OS:Any
Assigned to: CPU Architecture:Any

[17 Nov 2015 14:08] Daniël van Eeden
Description:
When in the you-must-change-your-password-sandbox the server side help function is not available.

How to repeat:
mysql> show slave status\G
ERROR 1820 (HY000): You must reset your password using ALTER USER statement before executing this statement.
mysql> help ALTER USER
ERROR 1820 (HY000): You must reset your password using ALTER USER statement before executing this statement.

Suggested fix:
Allow 'HELP ALTER USER' (or any HELP) while in sandbox mode.

Or add this to the error message:
ALTER USER USER() IDENTIFIED BY '<password>'
[18 Nov 2015 4:15] MySQL Verification Team
Hello Daniël,

Thank you for the report.

Thanks,
Umesh
[24 Mar 2020 2:56] Daniel Black
Still applicable in MySQL-8.0.

On a fresh install you are told about help, but can't use it.

Server version: 8.0.19

Copyright (c) 2000, 2020, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> create database sbtest;
ERROR 1820 (HY000): You must reset your password using ALTER USER statement before executing this statement.
mysql> help alter user
ERROR 1820 (HY000): You must reset your password using ALTER USER statement before executing this statement.