database/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2026-10-23 18:49:29 +03:00
Code Activity

MDEV-37971 CHECK TABLE command can be executed by users with the table-level CREATE but not with global CREATE

Browse Source 
CHECK TABLE was inconsistently requiring SELECT privilege on global/db level
or any privilege on the table/column level.

Change to require any table-applicable privilege on any level.
This commit is contained in:
Sergei Golubchik
2025-11-07 20:34:33 +01:00
parent 9134fea5d6
commit bc977fb008
5 changed files with 53 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
sql/sql_admin.cc
View File

@@ -1589,9 +1589,14 @@ bool Sql_cmd_check_table::execute(THD *thd)
bool res= TRUE;
DBUG_ENTER("Sql_cmd_check_table::execute");
if (check_table_access(thd, SELECT_ACL, first_table,
TRUE, UINT_MAX, FALSE))
if (check_some_access(thd, TABLE_ACLS, first_table))
{
my_error(ER_TABLEACCESS_DENIED_ERROR, MYF(0), "CHECK TABLE",
thd->security_ctx->priv_user,
thd->security_ctx->host_or_ip,
first_table->db.str, first_table->table_name.str);
goto error; /* purecov: inspected */
}
res= mysql_admin_table(thd, first_table, &m_lex->check_opt, &msg_check,
lock_type, 0, 0, HA_OPEN_FOR_REPAIR, 0,