672 lines
		
	
	
		
			22 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
		
		
			
		
	
	
			672 lines
		
	
	
		
			22 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
| 
								 | 
							
								# Grant tests not performed with embedded server
							 | 
						||
| 
								 | 
							
								-- source include/not_embedded.inc
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Save the initial number of concurrent sessions
							 | 
						||
| 
								 | 
							
								--source include/count_sessions.inc
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								SET NAMES binary;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# GRANT tests that require several connections
							 | 
						||
| 
								 | 
							
								# (usually it's GRANT, reconnect as another user, try something)
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# prepare playground before tests
							 | 
						||
| 
								 | 
							
								--disable_warnings
							 | 
						||
| 
								 | 
							
								drop database if exists mysqltest;
							 | 
						||
| 
								 | 
							
								drop database if exists mysqltest_1;
							 | 
						||
| 
								 | 
							
								--enable_warnings
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.db where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.tables_priv where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.columns_priv where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								grant all privileges on `my\_1`.* to mysqltest_1@localhost with grant option;
							 | 
						||
| 
								 | 
							
								grant create user on *.* to mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								create user mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								connect (user_a,localhost,mysqltest_1,,);
							 | 
						||
| 
								 | 
							
								connection user_a;
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								--error ER_PASSWORD_NOT_ALLOWED
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_2@localhost identified by 'pass';
							 | 
						||
| 
								 | 
							
								disconnect user_a;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								grant update on mysql.* to mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								connect (user_b,localhost,mysqltest_1,,);
							 | 
						||
| 
								 | 
							
								connection user_b;
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_2@localhost identified by 'pass';
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_3@localhost;
							 | 
						||
| 
								 | 
							
								disconnect user_b;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								grant insert on mysql.* to mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								connect (user_c,localhost,mysqltest_1,,);
							 | 
						||
| 
								 | 
							
								connection user_c;
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_3@localhost;
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_4@localhost identified by 'pass';
							 | 
						||
| 
								 | 
							
								disconnect user_c;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.db where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.tables_priv where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.columns_priv where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# wild_compare fun
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								grant all privileges on `my\_%`.* to mysqltest_1@localhost with grant option;
							 | 
						||
| 
								 | 
							
								grant create user on *.* to mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								connect (user1,localhost,mysqltest_1,,);
							 | 
						||
| 
								 | 
							
								connection user1;
							 | 
						||
| 
								 | 
							
								select current_user();
							 | 
						||
| 
								 | 
							
								grant all privileges on `my\_1`.* to mysqltest_2@localhost with grant option;
							 | 
						||
| 
								 | 
							
								--error ER_DBACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								grant all privileges on `my_%`.* to mysqltest_3@localhost with grant option;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# NO_AUTO_CREATE_USER mode
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								set @@sql_mode='NO_AUTO_CREATE_USER';
							 | 
						||
| 
								 | 
							
								select @@sql_mode;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# GRANT without IDENTIFIED BY does not create new users
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								--error ER_PASSWORD_NO_MATCH
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_4@localhost with grant option;
							 | 
						||
| 
								 | 
							
								grant select on `my\_1`.* to mysqltest_4@localhost identified by 'mypass'
							 | 
						||
| 
								 | 
							
								with grant option;
							 | 
						||
| 
								 | 
							
								disconnect user1;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								show grants for mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								show grants for mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								--error ER_NONEXISTING_GRANT
							 | 
						||
| 
								 | 
							
								show grants for mysqltest_3@localhost;
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.db where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# wild_compare part two - acl_cache
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								create database mysqltest_1;
							 | 
						||
| 
								 | 
							
								grant all privileges on `mysqltest\_1`.* to mysqltest_1@localhost with grant option;
							 | 
						||
| 
								 | 
							
								connect (user2,localhost,mysqltest_1,,);
							 | 
						||
| 
								 | 
							
								connection user2;
							 | 
						||
| 
								 | 
							
								select current_user();
							 | 
						||
| 
								 | 
							
								show databases;
							 | 
						||
| 
								 | 
							
								--error ER_DBACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								grant all privileges on `mysqltest_1`.* to mysqltest_1@localhost with grant option;
							 | 
						||
| 
								 | 
							
								disconnect user2;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								show grants for mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.db where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								drop database mysqltest_1;
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#6173 One can circumvent missing UPDATE privilege if he has SELECT and
							 | 
						||
| 
								 | 
							
								#          INSERT privilege for table with primary key
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								create database mysqltest;
							 | 
						||
| 
								 | 
							
								grant INSERT, SELECT on mysqltest.* to mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								use mysqltest;
							 | 
						||
| 
								 | 
							
								create table t1 (id int primary key, data varchar(255));
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								connect (mrbad, localhost, mysqltest_1,,mysqltest);
							 | 
						||
| 
								 | 
							
								connection mrbad;
							 | 
						||
| 
								 | 
							
								show grants for current_user();
							 | 
						||
| 
								 | 
							
								insert into t1 values (1, 'I can''t change it!');
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								update t1 set data='I can change it!' where id = 1;
							 | 
						||
| 
								 | 
							
								# This should not be allowed since it too require UPDATE privilege.
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								insert into t1 values (1, 'XXX') on duplicate key update data= 'I can change it!';
							 | 
						||
| 
								 | 
							
								select * from t1;
							 | 
						||
| 
								 | 
							
								disconnect mrbad;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								drop table t1;
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.db where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								create table t1 (a int, b int);
							 | 
						||
| 
								 | 
							
								grant select (a) on t1 to mysqltest_1@localhost with grant option;
							 | 
						||
| 
								 | 
							
								connect (mrugly, localhost, mysqltest_1,,mysqltest);
							 | 
						||
| 
								 | 
							
								connection mrugly;
							 | 
						||
| 
								 | 
							
								--error ER_COLUMNACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								grant select (a,b) on t1 to mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								grant select on t1 to mysqltest_3@localhost;
							 | 
						||
| 
								 | 
							
								disconnect mrugly;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								drop table t1;
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.db where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.tables_priv where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								delete from mysql.columns_priv where user like 'mysqltest\_%';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								drop database mysqltest;
							 | 
						||
| 
								 | 
							
								use test;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#15775 "drop user" command does not refresh acl_check_hosts
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Create some test users
							 | 
						||
| 
								 | 
							
								create user mysqltest_1@host1;
							 | 
						||
| 
								 | 
							
								create user mysqltest_2@host2;
							 | 
						||
| 
								 | 
							
								create user mysqltest_3@host3;
							 | 
						||
| 
								 | 
							
								create user mysqltest_4@host4;
							 | 
						||
| 
								 | 
							
								create user mysqltest_5@host5;
							 | 
						||
| 
								 | 
							
								create user mysqltest_6@host6;
							 | 
						||
| 
								 | 
							
								create user mysqltest_7@host7;
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Drop one user
							 | 
						||
| 
								 | 
							
								drop user mysqltest_3@host3;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# This connect failed before fix since the acl_check_hosts list was corrupted by the "drop user"
							 | 
						||
| 
								 | 
							
								connect (con8,127.0.0.1,root,,test,$MASTER_MYPORT,);
							 | 
						||
| 
								 | 
							
								disconnect con8;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Clean up - Drop all of the remaining users at once
							 | 
						||
| 
								 | 
							
								drop user mysqltest_1@host1, mysqltest_2@host2, mysqltest_4@host4,
							 | 
						||
| 
								 | 
							
								  mysqltest_5@host5, mysqltest_6@host6, mysqltest_7@host7;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Check that it's still possible to connect
							 | 
						||
| 
								 | 
							
								connect (con9,127.0.0.1,root,,test,$MASTER_MYPORT,);
							 | 
						||
| 
								 | 
							
								disconnect con9;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#16180 Setting SQL_LOG_OFF without SUPER privilege is silently ignored
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								create database mysqltest_1;
							 | 
						||
| 
								 | 
							
								grant select, insert, update on `mysqltest\_1`.* to mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								connect (con10,localhost,mysqltest_1,,);
							 | 
						||
| 
								 | 
							
								connection con10;
							 | 
						||
| 
								 | 
							
								--error ER_SPECIFIC_ACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								set sql_log_off = 1;
							 | 
						||
| 
								 | 
							
								--error ER_SPECIFIC_ACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								set sql_log_bin = 0;
							 | 
						||
| 
								 | 
							
								disconnect con10;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_1';
							 | 
						||
| 
								 | 
							
								delete from mysql.db where user like 'mysqltest\_1';
							 | 
						||
| 
								 | 
							
								drop database mysqltest_1;
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# End of 4.1 tests
							 | 
						||
| 
								 | 
							
								# Create and drop user
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								set sql_mode='maxdb';
							 | 
						||
| 
								 | 
							
								--disable_warnings
							 | 
						||
| 
								 | 
							
								drop table if exists t1, t2;
							 | 
						||
| 
								 | 
							
								--enable_warnings
							 | 
						||
| 
								 | 
							
								create table t1(c1 int);
							 | 
						||
| 
								 | 
							
								create table t2(c1 int, c2 int);
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Three forms of CREATE USER
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								--error ER_CANNOT_USER
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_2' identified by 'Mysqltest-2';
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_3' identified by password 'fffffffffffffffffffffffffffffffffffffffff';
							 | 
						||
| 
								 | 
							
								grant select on *.* to 'mysqltest_2';
							 | 
						||
| 
								 | 
							
								grant insert on test.* to 'mysqltest_2';
							 | 
						||
| 
								 | 
							
								grant update on test.t1 to 'mysqltest_2';
							 | 
						||
| 
								 | 
							
								grant update (c2) on test.t2 to 'mysqltest_2';
							 | 
						||
| 
								 | 
							
								select host,user,password from mysql.user where user like 'mysqltest_%' order by host,user,password;
							 | 
						||
| 
								 | 
							
								select host,db,user from mysql.db where user like 'mysqltest_%' order by host,db,user;
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name from mysql.tables_priv where user like 'mysqltest_%' order by host,db,user,table_name;
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name,column_name from mysql.columns_priv where user like 'mysqltest_%' order by host,db,user,table_name,column_name;
							 | 
						||
| 
								 | 
							
								show grants for 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								show grants for 'mysqltest_2';
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Drop
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								select host,user,password from mysql.user where user like 'mysqltest_%' order by host,user,password;
							 | 
						||
| 
								 | 
							
								select host,db,user from mysql.db where user like 'mysqltest_%' order by host,db,user;
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name from mysql.tables_priv where user like 'mysqltest_%' order by host,db,user,table_name;
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name,column_name from mysql.columns_priv where user like 'mysqltest_%' order by host,db,user,table_name,column_name;
							 | 
						||
| 
								 | 
							
								--error ER_NONEXISTING_GRANT
							 | 
						||
| 
								 | 
							
								show grants for 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Rename
							 | 
						||
| 
								 | 
							
								rename user 'mysqltest_2' to 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								select host,user,password from mysql.user where user like 'mysqltest_%' order by host,user,password;
							 | 
						||
| 
								 | 
							
								select host,db,user from mysql.db where user like 'mysqltest_%' order by host,db,user;
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name from mysql.tables_priv where user like 'mysqltest_%' order by host,db,user,table_name;
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name,column_name from mysql.columns_priv where user like 'mysqltest_%' order by host,db,user,table_name,column_name;
							 | 
						||
| 
								 | 
							
								show grants for 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1', 'mysqltest_3';
							 | 
						||
| 
								 | 
							
								--error ER_CANNOT_USER
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Cleanup
							 | 
						||
| 
								 | 
							
								drop table t1, t2;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Add a stray record
							 | 
						||
| 
								 | 
							
								insert into mysql.db set user='mysqltest_1', db='%', host='%';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								--error ER_NONEXISTING_GRANT
							 | 
						||
| 
								 | 
							
								show grants for 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								--error ER_REVOKE_GRANTS
							 | 
						||
| 
								 | 
							
								revoke all privileges, grant option from 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								select host,db,user from mysql.db where user = 'mysqltest_1' order by host,db,user;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Add a stray record
							 | 
						||
| 
								 | 
							
								insert into mysql.tables_priv set host='%', db='test', user='mysqltest_1', table_name='t1';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								--error ER_NONEXISTING_GRANT
							 | 
						||
| 
								 | 
							
								show grants for 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name from mysql.tables_priv where user = 'mysqltest_1' order by host,db,user,table_name;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Add a stray record
							 | 
						||
| 
								 | 
							
								insert into mysql.columns_priv set host='%', db='test', user='mysqltest_1', table_name='t1', column_name='c1';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								--error ER_NONEXISTING_GRANT
							 | 
						||
| 
								 | 
							
								show grants for 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1';
							 | 
						||
| 
								 | 
							
								select host,db,user,table_name,column_name from mysql.columns_priv where user = 'mysqltest_1' order by host,db,user,table_name,column_name;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Handle multi user lists
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_1', 'mysqltest_2', 'mysqltest_3';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1', 'mysqltest_2', 'mysqltest_3';
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_1', 'mysqltest_2' identified by 'Mysqltest-2', 'mysqltest_3' identified by password 'fffffffffffffffffffffffffffffffffffffffff';
							 | 
						||
| 
								 | 
							
								rename user 'mysqltest_1' to 'mysqltest_1a', 'mysqltest_2' TO 'mysqltest_2a', 'mysqltest_3' TO 'mysqltest_3a';
							 | 
						||
| 
								 | 
							
								--error ER_CANNOT_USER
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1', 'mysqltest_2', 'mysqltest_3';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1a', 'mysqltest_2a', 'mysqltest_3a';
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Let one of multiple users fail
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_1', 'mysqltest_2', 'mysqltest_3';
							 | 
						||
| 
								 | 
							
								--error ER_CANNOT_USER
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_1a', 'mysqltest_2', 'mysqltest_3a';
							 | 
						||
| 
								 | 
							
								--error ER_CANNOT_USER
							 | 
						||
| 
								 | 
							
								rename user 'mysqltest_1a' to 'mysqltest_1b', 'mysqltest_2a' TO 'mysqltest_2b', 'mysqltest_3a' TO 'mysqltest_3b';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1', 'mysqltest_2', 'mysqltest_3';
							 | 
						||
| 
								 | 
							
								--error ER_CANNOT_USER
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1b', 'mysqltest_2b', 'mysqltest_3b';
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Obsolete syntax has been dropped
							 | 
						||
| 
								 | 
							
								create user 'mysqltest_2' identified by 'Mysqltest-2';
							 | 
						||
| 
								 | 
							
								--error ER_PARSE_ERROR
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_2' identified by 'Mysqltest-2';
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_2';
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Strange user names
							 | 
						||
| 
								 | 
							
								create user '%@b'@'b';
							 | 
						||
| 
								 | 
							
								show grants for '%@b'@'b';
							 | 
						||
| 
								 | 
							
								grant select on mysql.* to '%@b'@'b';
							 | 
						||
| 
								 | 
							
								show grants for '%@b'@'b';
							 | 
						||
| 
								 | 
							
								rename user '%@b'@'b' to '%@a'@'a';
							 | 
						||
| 
								 | 
							
								--error ER_NONEXISTING_GRANT
							 | 
						||
| 
								 | 
							
								show grants for '%@b'@'b';
							 | 
						||
| 
								 | 
							
								show grants for '%@a'@'a';
							 | 
						||
| 
								 | 
							
								drop user '%@a'@'a';
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# CREATE USER privilege is enough
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								create user mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								grant create user on *.* to mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								connect (user3,localhost,mysqltest_2,,);
							 | 
						||
| 
								 | 
							
								connection user3;
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								select host,user,password from mysql.user where user like 'mysqltest_%' order by host,user,password;
							 | 
						||
| 
								 | 
							
								create user mysqltest_A@'%';
							 | 
						||
| 
								 | 
							
								rename user mysqltest_A@'%' to mysqltest_B@'%';
							 | 
						||
| 
								 | 
							
								drop user mysqltest_B@'%';
							 | 
						||
| 
								 | 
							
								disconnect user3;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								drop user mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# INSERT/UPDATE/DELETE is ok too
							 | 
						||
| 
								 | 
							
								create user mysqltest_3@localhost;
							 | 
						||
| 
								 | 
							
								grant INSERT,DELETE,UPDATE on mysql.* to mysqltest_3@localhost;
							 | 
						||
| 
								 | 
							
								connect (user4,localhost,mysqltest_3,,);
							 | 
						||
| 
								 | 
							
								connection user4;
							 | 
						||
| 
								 | 
							
								show grants;
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								select host,user,password from mysql.user where user like 'mysqltest_%' order by host,user,password;
							 | 
						||
| 
								 | 
							
								insert into mysql.user set host='%', user='mysqltest_B';
							 | 
						||
| 
								 | 
							
								create user mysqltest_A@'%';
							 | 
						||
| 
								 | 
							
								rename user mysqltest_B@'%' to mysqltest_C@'%';
							 | 
						||
| 
								 | 
							
								drop user mysqltest_C@'%';
							 | 
						||
| 
								 | 
							
								drop user mysqltest_A@'%';
							 | 
						||
| 
								 | 
							
								disconnect user4;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								drop user mysqltest_3@localhost;
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#3309 Test IP addresses with netmask
							 | 
						||
| 
								 | 
							
								set @@sql_mode='';
							 | 
						||
| 
								 | 
							
								create database mysqltest_1;
							 | 
						||
| 
								 | 
							
								create table mysqltest_1.t1 (i int);
							 | 
						||
| 
								 | 
							
								insert into mysqltest_1.t1 values (1),(2),(3);
							 | 
						||
| 
								 | 
							
								GRANT ALL ON mysqltest_1.t1 TO mysqltest_1@'127.0.0.0/255.0.0.0';
							 | 
						||
| 
								 | 
							
								connect (n1,127.0.0.1,mysqltest_1,,mysqltest_1,$MASTER_MYPORT,$MASTER_MYSOCK);
							 | 
						||
| 
								 | 
							
								connection n1;
							 | 
						||
| 
								 | 
							
								show grants for current_user();
							 | 
						||
| 
								 | 
							
								select * from t1;
							 | 
						||
| 
								 | 
							
								disconnect n1;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								REVOKE ALL ON mysqltest_1.t1 FROM mysqltest_1@'127.0.0.0/255.0.0.0';
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_1';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								drop table mysqltest_1.t1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#12302 Hostname resolution preventing password changes
							 | 
						||
| 
								 | 
							
								# 'SET PASSWORD = ...' didn't work if connecting hostname !=
							 | 
						||
| 
								 | 
							
								# hostname the current user is authenticated as. Note that a test for this
							 | 
						||
| 
								 | 
							
								# was also added to the test above.
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								grant all on mysqltest_1.* to mysqltest_1@'127.0.0.1';
							 | 
						||
| 
								 | 
							
								connect (b12302,127.0.0.1,mysqltest_1,,mysqltest_1,$MASTER_MYPORT,);
							 | 
						||
| 
								 | 
							
								connection b12302;
							 | 
						||
| 
								 | 
							
								select current_user();
							 | 
						||
| 
								 | 
							
								set password = password('changed');
							 | 
						||
| 
								 | 
							
								disconnect b12302;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								select host, length(password) from mysql.user where user like 'mysqltest\_1';
							 | 
						||
| 
								 | 
							
								revoke all on mysqltest_1.* from mysqltest_1@'127.0.0.1';
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_1';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								grant all on mysqltest_1.* to mysqltest_1@'127.0.0.0/255.0.0.0';
							 | 
						||
| 
								 | 
							
								connect (b12302_2,127.0.0.1,mysqltest_1,,mysqltest_1,$MASTER_MYPORT,);
							 | 
						||
| 
								 | 
							
								connection b12302_2;
							 | 
						||
| 
								 | 
							
								select current_user();
							 | 
						||
| 
								 | 
							
								set password = password('changed');
							 | 
						||
| 
								 | 
							
								disconnect b12302_2;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								select host, length(password) from mysql.user where user like 'mysqltest\_1';
							 | 
						||
| 
								 | 
							
								revoke all on mysqltest_1.* from mysqltest_1@'127.0.0.0/255.0.0.0';
							 | 
						||
| 
								 | 
							
								delete from mysql.user where user like 'mysqltest\_1';
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								drop database mysqltest_1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								--source include/add_anonymous_users.inc
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# But anonymous users can't change their password
							 | 
						||
| 
								 | 
							
								connect (n5,localhost,test,,test,$MASTER_MYPORT,$MASTER_MYSOCK);
							 | 
						||
| 
								 | 
							
								connection n5;
							 | 
						||
| 
								 | 
							
								--error ER_DBACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								set password = password("changed");
							 | 
						||
| 
								 | 
							
								disconnect n5;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								--source include/delete_anonymous_users.inc
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Bug#12423 "Deadlock when doing FLUSH PRIVILEGES and GRANT in
							 | 
						||
| 
								 | 
							
								# multi-threaded environment". We should be able to execute FLUSH
							 | 
						||
| 
								 | 
							
								# PRIVILEGES and SET PASSWORD simultaneously with other account
							 | 
						||
| 
								 | 
							
								# management commands (such as GRANT and REVOKE) without causing
							 | 
						||
| 
								 | 
							
								# deadlocks. To achieve this we should ensure that all account
							 | 
						||
| 
								 | 
							
								# management commands take table and internal locks in the same order.
							 | 
						||
| 
								 | 
							
								connect (con2root,localhost,root,,);
							 | 
						||
| 
								 | 
							
								connect (con3root,localhost,root,,);
							 | 
						||
| 
								 | 
							
								# Check that we can execute FLUSH PRIVILEGES and GRANT simultaneously
							 | 
						||
| 
								 | 
							
								# This will check that locks are taken in proper order during both
							 | 
						||
| 
								 | 
							
								# user/db-level and table/column-level privileges reloading.
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								lock table mysql.user write;
							 | 
						||
| 
								 | 
							
								connection con2root;
							 | 
						||
| 
								 | 
							
								send flush privileges;
							 | 
						||
| 
								 | 
							
								connection con3root;
							 | 
						||
| 
								 | 
							
								send grant all on *.* to 'mysqltest_1'@'localhost';
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								unlock tables;
							 | 
						||
| 
								 | 
							
								connection con2root;
							 | 
						||
| 
								 | 
							
								reap;
							 | 
						||
| 
								 | 
							
								connection con3root;
							 | 
						||
| 
								 | 
							
								reap;
							 | 
						||
| 
								 | 
							
								# Check for simultaneous SET PASSWORD and REVOKE.
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								lock table mysql.user write;
							 | 
						||
| 
								 | 
							
								connection con2root;
							 | 
						||
| 
								 | 
							
								send set password for 'mysqltest_1'@'localhost' = password('');
							 | 
						||
| 
								 | 
							
								connection con3root;
							 | 
						||
| 
								 | 
							
								send revoke all on *.* from 'mysqltest_1'@'localhost';
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								unlock tables;
							 | 
						||
| 
								 | 
							
								connection con2root;
							 | 
						||
| 
								 | 
							
								reap;
							 | 
						||
| 
								 | 
							
								connection con3root;
							 | 
						||
| 
								 | 
							
								reap;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								# Clean-up
							 | 
						||
| 
								 | 
							
								drop user 'mysqltest_1'@'localhost';
							 | 
						||
| 
								 | 
							
								disconnect con2root;
							 | 
						||
| 
								 | 
							
								disconnect con3root;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# End of 4.1 tests
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#17279 user with no global privs and with create
							 | 
						||
| 
								 | 
							
								#           priv in db can create databases
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								create database TESTDB;
							 | 
						||
| 
								 | 
							
								create table t2(a int);
							 | 
						||
| 
								 | 
							
								create temporary table t1 as select * from mysql.user;
							 | 
						||
| 
								 | 
							
								delete from mysql.user where host='localhost';
							 | 
						||
| 
								 | 
							
								INSERT INTO mysql.user (host, user, password) VALUES
							 | 
						||
| 
								 | 
							
								('%','mysqltest_1',password('password'));
							 | 
						||
| 
								 | 
							
								INSERT INTO mysql.db (host, db, user, select_priv) VALUES
							 | 
						||
| 
								 | 
							
								('%','TESTDB','mysqltest_1','Y');
							 | 
						||
| 
								 | 
							
								FLUSH PRIVILEGES;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								connect (con1,localhost,mysqltest_1,password,TESTDB);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# The user mysqltest_1 should only be allowed access to
							 | 
						||
| 
								 | 
							
								# database TESTDB, not TEStdb
							 | 
						||
| 
								 | 
							
								# On system with "lowercase names" we get error "ER_DB_CREATE_EXISTS: Can't create db..."
							 | 
						||
| 
								 | 
							
								--error ER_DBACCESS_DENIED_ERROR, ER_DB_CREATE_EXISTS
							 | 
						||
| 
								 | 
							
								create database TEStdb;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Clean-up
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								disconnect con1;
							 | 
						||
| 
								 | 
							
								delete from mysql.user;
							 | 
						||
| 
								 | 
							
								delete from mysql.db where host='%' and user='mysqltest_1' and db='TESTDB';
							 | 
						||
| 
								 | 
							
								insert into mysql.user select * from t1;
							 | 
						||
| 
								 | 
							
								drop table t1, t2;
							 | 
						||
| 
								 | 
							
								drop database TESTDB;
							 | 
						||
| 
								 | 
							
								flush privileges;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#13310 incorrect user parsing by SP
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								SET @old_log_bin_trust_function_creators= @@global.log_bin_trust_function_creators;
							 | 
						||
| 
								 | 
							
								SET GLOBAL log_bin_trust_function_creators = 1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								GRANT ALL PRIVILEGES ON test.* TO `a@`@localhost;
							 | 
						||
| 
								 | 
							
								GRANT EXECUTE ON * TO `a@`@localhost;
							 | 
						||
| 
								 | 
							
								connect (bug13310,localhost,'a@',,test);
							 | 
						||
| 
								 | 
							
								connection bug13310;
							 | 
						||
| 
								 | 
							
								CREATE TABLE t2 (s1 INT);
							 | 
						||
| 
								 | 
							
								INSERT INTO t2 VALUES (1);
							 | 
						||
| 
								 | 
							
								--disable_warnings
							 | 
						||
| 
								 | 
							
								DROP FUNCTION IF EXISTS f2;
							 | 
						||
| 
								 | 
							
								--enable_warnings
							 | 
						||
| 
								 | 
							
								delimiter //;
							 | 
						||
| 
								 | 
							
								CREATE FUNCTION f2 () RETURNS INT
							 | 
						||
| 
								 | 
							
								BEGIN DECLARE v INT; SELECT s1 FROM t2 INTO v; RETURN v; END//
							 | 
						||
| 
								 | 
							
								delimiter ;//
							 | 
						||
| 
								 | 
							
								SELECT f2();
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								DROP FUNCTION f2;
							 | 
						||
| 
								 | 
							
								DROP TABLE t2;
							 | 
						||
| 
								 | 
							
								disconnect bug13310;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								REVOKE ALL PRIVILEGES, GRANT OPTION FROM `a@`@localhost;
							 | 
						||
| 
								 | 
							
								DROP USER `a@`@localhost;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								SET @@global.log_bin_trust_function_creators= @old_log_bin_trust_function_creators;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#25578 CREATE TABLE LIKE does not require any privileges on source table
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								--disable_warnings
							 | 
						||
| 
								 | 
							
								drop database if exists mysqltest_1;
							 | 
						||
| 
								 | 
							
								drop database if exists mysqltest_2;
							 | 
						||
| 
								 | 
							
								--enable_warnings
							 | 
						||
| 
								 | 
							
								--error 0,ER_CANNOT_USER
							 | 
						||
| 
								 | 
							
								drop user mysqltest_u1@localhost;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								create database mysqltest_1;
							 | 
						||
| 
								 | 
							
								create database mysqltest_2;
							 | 
						||
| 
								 | 
							
								grant all on mysqltest_1.* to mysqltest_u1@localhost;
							 | 
						||
| 
								 | 
							
								use mysqltest_2;
							 | 
						||
| 
								 | 
							
								create table t1 (i int);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Connect as user with all rights on mysqltest_1 but with no rights on mysqltest_2.
							 | 
						||
| 
								 | 
							
								connect (user1,localhost,mysqltest_u1,,mysqltest_1);
							 | 
						||
| 
								 | 
							
								connection user1;
							 | 
						||
| 
								 | 
							
								# As expected error is emitted
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								show create table mysqltest_2.t1;
							 | 
						||
| 
								 | 
							
								# This should emit error as well
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								create table t1 like mysqltest_2.t1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Now let us check that SELECT privilege on the source is enough
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								grant select on mysqltest_2.t1 to mysqltest_u1@localhost;
							 | 
						||
| 
								 | 
							
								connection user1;
							 | 
						||
| 
								 | 
							
								show create table mysqltest_2.t1;
							 | 
						||
| 
								 | 
							
								create table t1 like mysqltest_2.t1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Clean-up
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								disconnect user1;
							 | 
						||
| 
								 | 
							
								use test;
							 | 
						||
| 
								 | 
							
								drop database mysqltest_1;
							 | 
						||
| 
								 | 
							
								drop database mysqltest_2;
							 | 
						||
| 
								 | 
							
								drop user mysqltest_u1@localhost;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#18660 Can't grant any privileges on single table in database
							 | 
						||
| 
								 | 
							
								#           with underscore char
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								grant all on `mysqltest\_%`.* to mysqltest_1@localhost with grant option;
							 | 
						||
| 
								 | 
							
								grant usage on *.* to mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								connect (con18600_1,localhost,mysqltest_1,,);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								create database mysqltest_1;
							 | 
						||
| 
								 | 
							
								use mysqltest_1;
							 | 
						||
| 
								 | 
							
								create table t1 (f1 int);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								grant create on `mysqltest\_1`.* to mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								grant select on mysqltest_1.t1 to mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								connect (con3,localhost,mysqltest_2,,);
							 | 
						||
| 
								 | 
							
								connection con3;
							 | 
						||
| 
								 | 
							
								--error ER_DBACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								create database mysqltest_3;
							 | 
						||
| 
								 | 
							
								use mysqltest_1;
							 | 
						||
| 
								 | 
							
								create table t2(f1 int);
							 | 
						||
| 
								 | 
							
								select * from t1;
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								drop database mysqltest_1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								disconnect con3;
							 | 
						||
| 
								 | 
							
								disconnect con18600_1;
							 | 
						||
| 
								 | 
							
								revoke all privileges, grant option from mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								revoke all privileges, grant option from mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								drop user mysqltest_1@localhost;
							 | 
						||
| 
								 | 
							
								drop user mysqltest_2@localhost;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug#30468 column level privileges not respected when joining tables
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								CREATE DATABASE db1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								USE db1;
							 | 
						||
| 
								 | 
							
								CREATE TABLE t1 (a INT, b INT);
							 | 
						||
| 
								 | 
							
								INSERT INTO t1 VALUES (1,1),(2,2);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								CREATE TABLE t2 (b INT, c INT);
							 | 
						||
| 
								 | 
							
								INSERT INTO t2 VALUES (1,100),(2,200);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								GRANT SELECT ON t1 TO mysqltest1@localhost;
							 | 
						||
| 
								 | 
							
								GRANT SELECT (b) ON t2 TO mysqltest1@localhost;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								connect (conn1,localhost,mysqltest1,,);
							 | 
						||
| 
								 | 
							
								connection conn1;
							 | 
						||
| 
								 | 
							
								USE db1;
							 | 
						||
| 
								 | 
							
								--error ER_COLUMNACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								SELECT c FROM t2;
							 | 
						||
| 
								 | 
							
								--error ER_TABLEACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								SELECT * FROM t2;
							 | 
						||
| 
								 | 
							
								--error ER_COLUMNACCESS_DENIED_ERROR
							 | 
						||
| 
								 | 
							
								SELECT * FROM t1 JOIN t2 USING (b);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								connection default;
							 | 
						||
| 
								 | 
							
								disconnect conn1;
							 | 
						||
| 
								 | 
							
								USE test;
							 | 
						||
| 
								 | 
							
								DROP TABLE db1.t1, db1.t2;
							 | 
						||
| 
								 | 
							
								DROP USER mysqltest1@localhost;
							 | 
						||
| 
								 | 
							
								DROP DATABASE db1;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								--echo End of 5.0 tests
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								# Bug #48319: Server crashes on "GRANT/REVOKE ... TO CURRENT_USER"
							 | 
						||
| 
								 | 
							
								#
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# work out who we are.
							 | 
						||
| 
								 | 
							
								USE mysql;
							 | 
						||
| 
								 | 
							
								SELECT LEFT(CURRENT_USER(),INSTR(CURRENT_USER(),'@')-1) INTO @u;
							 | 
						||
| 
								 | 
							
								SELECT MID(CURRENT_USER(),INSTR(CURRENT_USER(),'@')+1)  INTO @h;
							 | 
						||
| 
								 | 
							
								SELECT password FROM user WHERE user=@u AND host=@h INTO @pwd;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# show current privs.
							 | 
						||
| 
								 | 
							
								SELECT user,host,password,insert_priv FROM user WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# toggle INSERT
							 | 
						||
| 
								 | 
							
								UPDATE user SET insert_priv='N' WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								SELECT user,host,password,insert_priv FROM user WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# show that GRANT ... TO CURRENT_USER() no longer crashes
							 | 
						||
| 
								 | 
							
								GRANT INSERT ON *.* TO CURRENT_USER();
							 | 
						||
| 
								 | 
							
								SELECT user,host,password,insert_priv FROM user WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								UPDATE user SET insert_priv='N' WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# show that GRANT ... TO CURRENT_USER() IDENTIFIED BY ... works now
							 | 
						||
| 
								 | 
							
								GRANT INSERT ON *.* TO CURRENT_USER() IDENTIFIED BY 'keksdose';
							 | 
						||
| 
								 | 
							
								SELECT user,host,password,insert_priv FROM user WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								UPDATE user SET password=@pwd WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								SELECT user,host,password,insert_priv FROM user WHERE user=@u AND host=@h;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								FLUSH PRIVILEGES;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								USE test;
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								--echo End of 5.1 tests
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								# Wait till we reached the initial number of concurrent sessions
							 | 
						||
| 
								 | 
							
								--source include/wait_until_count_sessions.inc
							 |