Bug #9785 SELECT privilege for the whole database is needed to do SHOW CREATE DATABASE
| Submitted: | 9 Apr 2005 15:26 | Modified: | 2 Dec 2005 20:01 |
|---|---|---|---|
| Reporter: | Ondra Zizka | Email Updates: | |
| Status: | Closed | Impact on me: | |
| Category: | MySQL Server | Severity: | S3 (Non-critical) |
| Version: | 4.1.10 | OS: | Any (All) |
| Assigned to: | Sergei Glukhov | CPU Architecture: | Any |
[9 Apr 2005 15:26]
Ondra Zizka
[13 Jun 2005 23:31]
Ondra Zizka
As it blocks some applications from proper function in one case or leads to potetial lack of security in other case, I change the severity to S3.
[22 Jun 2005 22:12]
MySQL Verification Team
Maybe more adequate it is a feature request. miguel@hegel:~/dbs/4.1$ bin/mysql -uroot Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 4 to server version: 4.1.13-debug-log Type 'help;' or '\h' for help. Type '\c' to clear the buffer. mysql> create database db4; Query OK, 1 row affected (0.02 sec) mysql> use db4; Database changed mysql> create table t0 (id int); Query OK, 0 rows affected (0.00 sec) mysql> create table t1 (id int); Query OK, 0 rows affected (0.00 sec) mysql> grant select on db4.t0 to 'userbug'@'localhost' identified by 'userpass'; Query OK, 0 rows affected (0.00 sec) mysql> exit Bye miguel@hegel:~/dbs/4.1$ bin/mysql -uuserbug -p db4 Enter password: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 5 to server version: 4.1.13-debug-log Type 'help;' or '\h' for help. Type '\c' to clear the buffer. mysql> select * from t1; ERROR 1142 (42000): SELECT command denied to user 'userbug'@'localhost' for table 't1' mysql> select * from t0; Empty set (0.00 sec) mysql> show create database db4; ERROR 1044 (42000): Access denied for user 'userbug'@'localhost' to database 'db4' mysql>
[1 Dec 2005 9:00]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/internals/32893
[1 Dec 2005 9:02]
Sergei Glukhov
Fixed in 5.1.4-alpha
[2 Dec 2005 20:01]
Paul DuBois
Noted in 5.1.4 changelog.
Portions of this website are copyright © 2001, 2002 The PHP Group
Page generated in 0.056 sec. using MySQL 8.4.7-u6-cloud
Timestamp references displayed by the system are UTC.
Content reproduced on this site is the property of the
respective copyright holders.
It is not reviewed in advance
by Oracle and does not necessarily represent the opinion of
Oracle or any other party.