mirror of
https://github.com/MariaDB/server.git
synced 2025-09-02 09:41:40 +03:00
120 lines
2.7 KiB
Plaintext
120 lines
2.7 KiB
Plaintext
-- source include/not_embedded.inc
|
|
|
|
--echo #
|
|
--echo # Start of 10.5 tests
|
|
--echo #
|
|
|
|
--echo #
|
|
--echo # MDEV-21743 Split up SUPER privilege to smaller privileges
|
|
--echo #
|
|
|
|
--echo #
|
|
--echo # Test that slave admin statements are not allowed without REPLICATION SLAVE ADMIN or SUPER
|
|
--echo #
|
|
|
|
CREATE USER user1@localhost IDENTIFIED BY '';
|
|
GRANT ALL PRIVILEGES ON *.* TO user1@localhost;
|
|
REVOKE REPLICATION SLAVE ADMIN, SUPER ON *.* FROM user1@localhost;
|
|
|
|
connect (con1,localhost,user1,,);
|
|
connection con1;
|
|
--error ER_SPECIFIC_ACCESS_DENIED_ERROR
|
|
START SLAVE;
|
|
--error ER_SPECIFIC_ACCESS_DENIED_ERROR
|
|
CHANGE MASTER TO MASTER_HOST='127.0.0.1';
|
|
--error ER_SPECIFIC_ACCESS_DENIED_ERROR
|
|
STOP SLAVE;
|
|
--error ER_SPECIFIC_ACCESS_DENIED_ERROR
|
|
SHOW SLAVE STATUS;
|
|
disconnect con1;
|
|
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
|
|
|
|
--echo #
|
|
--echo # Test that slave admin statements are allowed with REPLICATION SLAVE ADMIN
|
|
--echo #
|
|
|
|
CREATE USER user1@localhost IDENTIFIED BY '';
|
|
GRANT REPLICATION SLAVE ADMIN ON *.* TO user1@localhost;
|
|
SHOW GRANTS FOR user1@localhost;
|
|
|
|
connect (con1,localhost,user1,,);
|
|
connection con1;
|
|
--error ER_BAD_SLAVE
|
|
START SLAVE;
|
|
CHANGE MASTER TO MASTER_USER='root';
|
|
STOP SLAVE;
|
|
--disable_result_log
|
|
SHOW SLAVE STATUS;
|
|
--enable_result_log
|
|
disconnect con1;
|
|
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
|
|
|
|
--echo #
|
|
--echo # Test that slave admin statements are allowed with SUPER
|
|
--echo #
|
|
|
|
CREATE USER user1@localhost IDENTIFIED BY '';
|
|
GRANT SUPER ON *.* TO user1@localhost;
|
|
SHOW GRANTS FOR user1@localhost;
|
|
|
|
connect (con1,localhost,user1,,);
|
|
connection con1;
|
|
--error ER_BAD_SLAVE
|
|
START SLAVE;
|
|
CHANGE MASTER TO MASTER_USER='root';
|
|
STOP SLAVE;
|
|
--disable_result_log
|
|
SHOW SLAVE STATUS;
|
|
--enable_result_log
|
|
disconnect con1;
|
|
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
|
|
|
|
|
|
--echo #
|
|
--echo # Test that SHOW RELAYLOG EVENTS is not allowed without REPLICATION SLAVE ADMIN
|
|
--echo #
|
|
|
|
CREATE USER user1@localhost IDENTIFIED BY '';
|
|
GRANT ALL PRIVILEGES ON *.* TO user1@localhost;
|
|
REVOKE REPLICATION SLAVE ADMIN ON *.* FROM user1@localhost;
|
|
connect (con1,localhost,user1,,);
|
|
connection con1;
|
|
--disable_ps_protocol
|
|
--error ER_SPECIFIC_ACCESS_DENIED_ERROR
|
|
SHOW RELAYLOG EVENTS;
|
|
--enable_ps_protocol
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
|
|
--echo #
|
|
--echo # Test that SHOW RELAYLOG EVENTS is allowed with REPLICATION SLAVE ADMIN
|
|
--echo #
|
|
|
|
CREATE USER user1@localhost IDENTIFIED BY '';
|
|
GRANT REPLICATION SLAVE ADMIN ON *.* TO user1@localhost;
|
|
connect (con1,localhost,user1,,);
|
|
connection con1;
|
|
--disable_ps_protocol
|
|
--disable_result_log
|
|
SHOW RELAYLOG EVENTS;
|
|
--enable_result_log
|
|
--enable_ps_protocol
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
|
|
|
|
--echo #
|
|
--echo # End of 10.5 tests
|
|
--echo #
|