Oleksandr Byelkin ead9739532 MDEV-41099 HANDLER READ missing column privilege check ...

HANDLER OPEN accepted column-level SELECT grants as table access, but
HANDLER READ returns all columns and never checked column privileges.
Reopen of a handler table (after FLUSH/ALTER) did no checks at all.

Require SELECT on every column (as for SELECT *) when the user has no
table-level SELECT, and redo the privilege checks on reopen.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-09 11:48:19 +02:00

336 KiB

Raw Permalink Blame History

View Raw