mirror of
https://github.com/MariaDB/server.git
synced 2025-09-02 09:41:40 +03:00
A fix for privilege checking bug.
sql/sql_parse.cc: Fix for a privilege bug in multi-table updates. Seems like better fix then chec_table_access.
This commit is contained in:
@@ -1840,8 +1840,14 @@ mysql_execute_command(void)
|
||||
break;
|
||||
}
|
||||
case SQLCOM_UPDATE:
|
||||
if (check_access(thd,UPDATE_ACL,tables->db,&tables->grant.privilege))
|
||||
TABLE_LIST *table;
|
||||
if (check_db_used(thd,tables))
|
||||
goto error;
|
||||
for (table=tables ; table ; table=table->next)
|
||||
{
|
||||
if (check_access(thd,UPDATE_ACL,table->db,&table->grant.privilege))
|
||||
goto error;
|
||||
}
|
||||
if (grant_option && check_grant(thd,UPDATE_ACL,tables))
|
||||
goto error;
|
||||
if (select_lex->item_list.elements != lex->value_list.elements)
|
||||
|
Reference in New Issue
Block a user