4 Commits

Author	SHA1	Message	Date
Sergei Golubchik	f99586668a	MDEV-36380 User has unauthorized access to a sequence through a view with security invoker ... check sequence privileges in Item_func_nextval::fix_fields(), just like column privileges are checked in Item_field::fix_fields() remove sequence specific hacks that kinda made sequence privilege checks works, but not in all cases. And they were too lax, didn't requre SELECT privilege for NEXTVAL. Also INSERT privilege looks wrong here, UPDATE would've been more appropriate, but won't change that for compatibility reasons. also fixes MDEV-36413 User without any privileges to a sequence can read from it and modify it via column default	2025-04-17 17:18:55 +02:00
Lena Startseva	9854fb6fa7	MDEV-31003: Second execution for ps-protocol ... This patch adds for "--ps-protocol" second execution of queries "SELECT". Also in this patch it is added ability to disable/enable (--disable_ps2_protocol/--enable_ps2_protocol) second execution for "--ps-prototocol" in testcases.	2023-07-26 17:15:00 +07:00
Monty	144616034c	Don't run sql_sequence.grant for embeddes server	2018-02-16 01:35:19 +02:00
Monty	1fe9092d06	Fix privilege checking for sequence ... MDEV-13732 User with SELECT privilege can ALTER sequence	2018-02-14 16:43:22 +02:00