mirror of
https://github.com/MariaDB/server.git
synced 2025-11-27 05:41:41 +03:00
92a523e5d5
A clean-up: require CREATE+DROP privileges for "CREATE OR REPLACE DATABASE", instead of just CREATE privilege.
41 lines
1.5 KiB
Plaintext
41 lines
1.5 KiB
Plaintext
#
|
|
# Tests for checking permission denied on CREATE OR REPLACE if DROP
|
|
# access is revoked
|
|
#
|
|
# These statements do not need special tests for CREATE OR REPLACE,
|
|
# because they do not have separate permissions for create and drop:
|
|
# CREATE OR REPLACE EVENT (uses EVENT_ACL for both CREATE and DROP)
|
|
# CREATE OR DROP SERVER (uses SUPER_ALC for both CREATE and DROP)
|
|
# CREATE OR DROP TRIGGER (uses TRIGGER_ACL for both CREATE and DROP)
|
|
SELECT CURRENT_USER;
|
|
CURRENT_USER
|
|
root@localhost
|
|
CREATE DATABASE db1;
|
|
GRANT ALL ON db1.* TO mysqltest_1@localhost;
|
|
REVOKE DROP ON db1.* FROM mysqltest_1@localhost;
|
|
REVOKE ALTER ROUTINE ON db1.* FROM mysqltest_1@localhost;
|
|
GRANT DELETE ON mysql.* TO mysqltest_1@localhost;
|
|
REVOKE DELETE ON mysql.* FROM mysqltest_1@localhost;
|
|
FLUSH PRIVILEGES;
|
|
SELECT CURRENT_USER;
|
|
CURRENT_USER
|
|
mysqltest_1@localhost
|
|
CREATE DATABASE db1;
|
|
ERROR HY000: Can't create database 'db1'; database exists
|
|
CREATE OR REPLACE DATABASE db1;
|
|
ERROR 42000: Access denied for user 'mysqltest_1'@'localhost' to database 'db1'
|
|
CREATE OR REPLACE DATABASE db2;
|
|
ERROR 42000: Access denied for user 'mysqltest_1'@'localhost' to database 'db2'
|
|
USE db1;
|
|
CREATE OR REPLACE TABLE t1(id INT);
|
|
ERROR 42000: DROP command denied to user 'mysqltest_1'@'localhost' for table 't1'
|
|
SELECT CURRENT_USER;
|
|
CURRENT_USER
|
|
root@localhost
|
|
REVOKE ALL ON db1.* FROM mysqltest_1@localhost;
|
|
DROP DATABASE IF EXISTS db2;
|
|
Warnings:
|
|
Note 1008 Can't drop database 'db2'; database doesn't exist
|
|
DROP DATABASE db1;
|
|
DROP USER mysqltest_1@localhost;
|