Dmitry Lenev 94fbedd3e3
Fix for bug #58499 "DEFINER-security view selecting from ...
INVOKER-security view access check wrong".
When privilege checks were done for tables used from an
INVOKER-security view which in its turn was used from
a DEFINER-security view connection's active security
context was incorrectly used instead of security context
with privileges of the second view's creator.
This meant that users which had enough rights to access
the DEFINER-security view and as result were supposed to
be able successfully access it were unable to do so in
cases when they didn't have privileges on underlying tables
of the INVOKER-security view.
This problem was caused by the fact that for INVOKER-security
views TABLE_LIST::security_ctx member for underlying tables
were set to 0 even in cases when particular view was used from
another DEFINER-security view. This meant that when checks of
privileges on these underlying tables was done in
setup_tables_and_check_access() active connection security
context was used instead of context corresponding to the
creator of caller view.
This fix addresses the problem by ensuring that underlying
tables of an INVOKER-security view inherit security context
from the view and thus correct security context is used for
privilege checks on underlying tables in cases when such view
is used from another view with DEFINER-security.
2011-01-12 16:08:30 +03:00
2010-05-24 21:54:08 +08:00
2009-12-18 14:00:30 +02:00
2009-10-30 11:40:44 +02:00
2010-03-25 23:57:06 +04:00
2011-01-04 14:36:37 +01:00
2010-02-09 11:30:50 +01:00
2010-02-25 23:13:11 +04:00
2010-05-28 00:07:40 +04:00
2010-02-02 14:17:21 +02:00
2010-04-22 15:52:00 +02:00
2009-09-18 16:01:18 +03:00
2009-11-25 12:25:49 +05:30
2009-10-27 12:09:19 +04:00
2010-11-25 03:11:05 +00:00
2010-07-20 14:36:15 -03:00
2010-03-09 07:36:26 -03:00
2010-11-11 07:34:14 +00:00
2009-12-22 13:52:23 +04:00
2010-05-24 21:54:08 +08:00
2010-01-16 15:44:24 +08:00
2010-03-09 16:09:32 +01:00
2010-05-24 21:54:08 +08:00
2010-11-26 16:58:54 +03:00
2009-09-07 13:42:54 +08:00
2010-11-18 11:53:08 +03:00
2010-03-22 16:27:59 +04:00
2010-04-06 12:26:59 +05:00
2010-11-11 13:25:23 +03:00
2010-10-12 23:25:40 +04:00
2010-11-12 13:12:15 +03:00
2009-09-29 17:38:40 +02:00
2010-02-17 16:13:42 +04:00
2009-11-18 13:49:45 +01:00
2010-08-31 02:16:38 +04:00
2010-12-14 12:33:03 +03:00
2009-09-06 00:42:17 +04:00
2010-06-24 15:21:23 +02:00
2010-05-19 11:18:59 +02:00
2010-10-18 16:12:27 +04:00
2010-05-24 21:54:08 +08:00
2009-12-22 17:52:15 +02:00
2010-10-18 14:47:26 +04:00
2010-04-03 00:30:22 +04:00
2010-12-13 13:39:26 +03:00
2010-12-21 15:30:07 +03:00
2010-06-22 22:53:08 +04:00
2010-06-08 10:22:40 +04:00
2010-06-20 02:02:58 +04:00
2010-12-24 14:05:04 +03:00
2010-10-12 23:28:03 +04:00
2010-08-13 16:05:46 +03:00
2010-12-14 19:08:25 +03:00
2010-10-31 19:04:38 +03:00
2010-03-25 15:49:01 +04:00
2010-09-09 13:40:17 +04:00
2009-10-29 22:06:10 -07:00
2010-10-18 21:03:53 +07:00
2009-10-27 12:09:19 +04:00
2010-10-13 12:28:58 +07:00
2010-10-29 12:23:06 +04:00
2010-06-11 09:38:29 +02:00
2010-06-09 14:45:04 +04:00
2009-09-29 17:38:40 +02:00
2010-07-09 14:39:47 +04:00
2010-10-07 10:13:11 +02:00
2010-10-07 10:13:11 +02:00
2009-09-28 13:25:47 +02:00
2010-06-25 12:01:47 +04:00
2010-12-19 18:07:28 +01:00
2010-05-28 00:07:40 +04:00
2009-09-02 18:58:17 +02:00
2010-08-09 13:39:59 +02:00
2010-10-29 12:23:06 +04:00
2010-09-07 15:43:00 +02:00
2010-11-25 03:11:05 +00:00
2010-07-14 14:54:51 +03:00
2009-10-19 13:44:44 +05:00
2010-05-28 00:07:40 +04:00
2010-05-12 13:19:12 +02:00
2010-02-26 09:22:48 -03:00
2010-11-07 23:42:54 +06:00
2009-10-27 12:09:19 +04:00
2009-09-09 14:38:50 +05:00
2010-07-21 18:05:57 +03:00
2010-10-19 12:27:09 +02:00
2010-06-25 15:59:44 +03:00
2010-11-29 22:46:43 -06:00
2010-03-12 10:33:16 +04:00
2010-12-14 12:33:03 +03:00
2009-10-14 16:26:16 +05:00
2010-03-25 16:11:16 +04:00
2010-07-30 09:17:10 -03:00
2010-07-01 12:05:09 +03:00
2010-12-01 12:25:31 +05:30
2010-03-22 13:10:18 +01:00
2009-09-07 13:42:54 +08:00
2010-12-29 11:52:57 +08:00
2010-12-19 18:07:28 +01:00
2010-05-07 00:41:37 +04:00
2010-06-03 10:31:26 +02:00
2010-06-03 10:31:26 +02:00
2010-12-16 16:40:52 +02:00
2010-02-05 17:51:55 +00:00
2009-09-25 11:26:49 +02:00
2009-11-06 17:54:19 +03:00
2010-01-29 16:54:27 +02:00
2010-09-13 13:33:19 +02:00
2010-05-07 00:41:37 +04:00
2010-10-01 13:39:04 +02:00
2009-12-13 23:29:50 +03:00
2009-09-03 08:38:06 +02:00
2010-02-01 16:07:00 +01:00
2010-12-22 10:50:36 +01:00
2010-08-27 10:43:51 +02:00
2009-09-25 11:26:49 +02:00
2010-10-05 14:57:51 +02:00
2010-10-15 20:13:35 +05:00
2010-07-08 14:36:55 +02:00
2009-10-08 15:36:43 +02:00
2010-08-26 17:14:18 +02:00
2010-08-27 10:43:51 +02:00
2010-12-22 10:50:36 +01:00
2010-12-01 13:54:50 +01:00
2010-08-16 16:43:21 +03:00
2010-08-16 16:43:21 +03:00
2010-08-16 16:43:21 +03:00
2010-08-16 16:43:21 +03:00
2010-01-16 15:44:24 +08:00
2009-10-27 14:09:36 +04:00
2010-10-04 12:51:26 +04:00
2010-03-24 17:37:41 +01:00
2009-11-03 17:18:43 +01:00
2010-08-24 19:51:32 +04:00
2010-05-21 22:47:32 +04:00
2010-09-09 16:46:13 +04:00
2010-06-26 19:36:00 +02:00
2010-06-24 12:00:48 +04:00
2010-11-30 09:43:50 -06:00
2010-03-31 16:12:37 +03:00
2010-02-05 13:39:46 +04:00
2010-01-12 15:16:26 +01:00
2010-05-24 21:54:08 +08:00
2010-02-09 11:30:50 +01:00
2010-11-11 10:52:51 +06:00
2009-11-21 09:18:21 -02:00
2010-02-09 11:30:50 +01:00
2009-11-27 18:10:28 +02:00
2009-12-02 15:17:08 +04:00
2010-02-09 11:30:50 +01:00
2010-03-09 07:36:26 -03:00
2011-01-12 09:55:31 +01:00
2010-09-09 16:46:13 +04:00
2010-04-01 18:49:02 +04:00
2009-10-27 14:09:36 +04:00
2010-08-06 23:29:37 +04:00
2010-09-07 15:53:46 +07:00
2010-08-18 12:56:06 +08:00
2010-02-16 13:13:49 +04:00
2010-10-31 19:04:38 +03:00
2010-03-16 10:20:07 +01:00
2010-03-09 07:36:26 -03:00
2009-11-20 12:10:47 +02:00
2010-05-31 13:25:11 +04:00
2010-09-13 11:18:35 +04:00
2010-03-22 12:33:25 +04:00
2010-03-18 11:26:27 +01:00
2010-03-09 07:36:26 -03:00
2010-07-19 11:03:52 +02:00
2010-05-21 22:47:32 +04:00
2010-11-22 09:57:59 +01:00
2010-02-11 14:26:58 +01:00
2010-09-22 23:33:18 +04:00
2010-11-15 16:17:38 +01:00
2010-11-25 03:11:05 +00:00
2010-03-09 07:36:26 -03:00
2011-01-12 16:08:30 +03:00
2010-12-14 12:33:03 +03:00
2010-02-09 11:30:50 +01:00
2009-09-22 08:22:07 -03:00
2010-03-10 19:31:22 +04:00
2010-11-22 12:21:10 +03:00
94fbedd3e3