[MDEV-28455] CREATE TEMPORARY TABLES privilege is insufficient for SHOW COLUMNS - Jira

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Major
Resolution: Fixed
Affects Version/s: 10.2(EOL), 10.3(EOL), 10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL)
Fix Version/s: 10.3.37, 10.4.27, 10.5.18, 10.6.11, 10.7.7, 10.8.6, 10.9.4, 10.10.2, 10.11.1
Component/s: Authentication and Privilege System, Data Definition - Temporary
Labels:
None

Description

CREATE TEMPORARY TABLES privilege is supposed to allow all actions with temporary tables created by the session.
However, while it also allows to run SHOW COLUMNS on such tables, it's not sufficient to get a result, it remains empty.
Oddly, SHOW INDEX works.

create database db;

create user foo@localhost;

grant create temporary tables on db.* to foo@localhost;

--connect (con1,localhost,foo,,db)

create temporary table tmp (a int, key(a));

show create table tmp;

show columns in tmp;

show index in tmp;

# Cleanup

--disconnect con1

--connection default

drop database db;

drop user foo@localhost;

bb-10.9-anel 32274c3e8a4
show columns in tmp;
Field Type Null Key Default Extra
show index in tmp;
Table Non_unique Key_name Seq_in_index Column_name Collation Cardinality Sub_part Packed Null Index_type Comment Index_comment Ignored
tmp 1 a 1 a A NULL NULL NULL YES BTREE NO

Attachments

Issue Links

relates to

MDEV-28544 Appending SELECT privilege not applied on show columns and show index

Closed

MDEV-28548 ER_TABLEACCESS_DENIED_ERROR is missing information about DB

Closed

MDEV-28783 Privilege inconsistency between show columns and information_schema.columns

Open

MDEV-12459 The information_schema tables for getting temporary tables info is missing, at least for innodb there is no INNODB_TEMP_TABLE_INFO

Closed

MDEV-28544 Appending SELECT privilege not applied on show columns and show index

Closed

links to

PR #2180

(1 links to)

Activity

Ascending order - Click to sort in descending order

Elena Stepanova created issue - 2022-05-02 15:35

Elena Stepanova made changes - 2022-05-02 15:35

Field	Original Value	New Value
Link		This issue is caused by ~~MDEV-12459~~ [ ~~MDEV-12459~~ ]

Anel Husakovic made changes - 2022-05-03 07:01

Assignee

Anel Husakovic [ anel ]

Vicențiu Ciorbaru [ cvicentiu ]

Elena Stepanova made changes - 2022-05-11 09:25

Link

This issue relates to ~~MDEV-12459~~ [ ~~MDEV-12459~~ ]

Elena Stepanova made changes - 2022-05-11 09:25

Fix Version/s		10.3 [ 22126 ]
Fix Version/s		10.4 [ 22408 ]
Fix Version/s		10.5 [ 23123 ]
Fix Version/s		10.6 [ 24028 ]
Fix Version/s		10.7 [ 24805 ]
Fix Version/s		10.8 [ 26121 ]
Fix Version/s	10.9 [ 26905 ]
Affects Version/s		10.2 [ 14601 ]
Affects Version/s		10.3 [ 22126 ]
Affects Version/s		10.4 [ 22408 ]
Affects Version/s		10.5 [ 23123 ]
Affects Version/s		10.6 [ 24028 ]
Affects Version/s		10.7 [ 24805 ]
Affects Version/s		10.8 [ 26121 ]
Affects Version/s	N/A [ 14700 ]
Priority	Critical [ 2 ]	Major [ 3 ]

Elena Stepanova made changes - 2022-05-11 09:25

Link

This issue is caused by ~~MDEV-12459~~ [ ~~MDEV-12459~~ ]

Anel Husakovic made changes - 2022-05-11 11:58

Assignee

Vicențiu Ciorbaru [ cvicentiu ]

Anel Husakovic [ anel ]

Anel Husakovic made changes - 2022-05-11 11:58

Status

Open [ 1 ]

In Progress [ 3 ]

Anel Husakovic made changes - 2022-05-11 12:57

Link

This issue relates to ~~MDEV-28544~~ [ ~~MDEV-28544~~ ]

Anel Husakovic made changes - 2022-05-11 13:59

Assignee	Anel Husakovic [ anel ]	Vicențiu Ciorbaru [ cvicentiu ]
Status	In Progress [ 3 ]	In Review [ 10002 ]

Anel Husakovic made changes - 2022-05-12 12:10

Link

This issue relates to ~~MDEV-28548~~ [ ~~MDEV-28548~~ ]

Vicențiu Ciorbaru made changes - 2022-05-13 06:34

Description

{{CREATE TEMPORARY TABLES}} privilege is supposed to allow all actions with temporary tables created by the session.
However, while it also allows to _run_ {{SHOW COLUNNS}} on such tables, it's not sufficient to get a result, it remains empty.
Oddly, {{SHOW INDEX}} works.

{code:sql}
create database db;
create user foo@localhost;
grant create temporary tables on db.* to foo@localhost;

--connect (con1,localhost,foo,,db)
create temporary table tmp (a int, key(a));
show create table tmp;
show columns in tmp;
show index in tmp;

# Cleanup
--disconnect con1
--connection default
drop database db;
drop user foo@localhost;
{code}

{code:sql|title=bb-10.9-anel 32274c3e8a4}
show columns in tmp;
Field Type Null Key Default Extra
show index in tmp;
Table Non_unique Key_name Seq_in_index Column_name Collation Cardinality Sub_part Packed Null Index_type Comment Index_comment Ignored
tmp 1 a 1 a A NULL NULL NULL YES BTREE NO
{code}

{{CREATE TEMPORARY TABLES}} privilege is supposed to allow all actions with temporary tables created by the session.
However, while it also allows to _run_ {{SHOW COLUMNS}} on such tables, it's not sufficient to get a result, it remains empty.
Oddly, {{SHOW INDEX}} works.

{code:sql}
create database db;
create user foo@localhost;
grant create temporary tables on db.* to foo@localhost;

--connect (con1,localhost,foo,,db)
create temporary table tmp (a int, key(a));
show create table tmp;
show columns in tmp;
show index in tmp;

# Cleanup
--disconnect con1
--connection default
drop database db;
drop user foo@localhost;
{code}

{code:sql|title=bb-10.9-anel 32274c3e8a4}
show columns in tmp;
Field Type Null Key Default Extra
show index in tmp;
Table Non_unique Key_name Seq_in_index Column_name Collation Cardinality Sub_part Packed Null Index_type Comment Index_comment Ignored
tmp 1 a 1 a A NULL NULL NULL YES BTREE NO
{code}

Vicențiu Ciorbaru made changes - 2022-05-31 05:30

Assignee	Vicențiu Ciorbaru [ cvicentiu ]	Anel Husakovic [ anel ]
Status	In Review [ 10002 ]	Stalled [ 10000 ]

Anel Husakovic made changes - 2022-06-09 10:09

Link

This issue relates to MDEV-28783 [ MDEV-28783 ]

Anel Husakovic made changes - 2022-06-09 10:29

Link

This issue relates to ~~MDEV-28544~~ [ ~~MDEV-28544~~ ]

Anel Husakovic made changes - 2022-07-04 14:18

Assignee	Anel Husakovic [ anel ]	Vicențiu Ciorbaru [ cvicentiu ]
Status	Stalled [ 10000 ]	In Review [ 10002 ]

Anel Husakovic made changes - 2022-07-04 14:18

Remote Link

This issue links to "PR #2180 (Web Link)" [ 34073 ]

Vicențiu Ciorbaru made changes - 2022-10-18 06:49

Assignee	Vicențiu Ciorbaru [ cvicentiu ]	Anel Husakovic [ anel ]
Status	In Review [ 10002 ]	Stalled [ 10000 ]

Vicențiu Ciorbaru made changes - 2022-10-18 07:34

Fix Version/s		10.3.37 [ 28404 ]
Fix Version/s		10.4.27 [ 28405 ]
Fix Version/s		10.5.18 [ 28421 ]
Fix Version/s		10.6.11 [ 28441 ]
Fix Version/s		10.7.7 [ 28442 ]
Fix Version/s		10.8.6 [ 28443 ]
Fix Version/s		10.9.4 [ 28444 ]
Fix Version/s		10.10.2 [ 28410 ]
Fix Version/s		10.11.1 [ 28454 ]
Fix Version/s	10.3 [ 22126 ]
Fix Version/s	10.4 [ 22408 ]
Fix Version/s	10.5 [ 23123 ]
Fix Version/s	10.6 [ 24028 ]
Fix Version/s	10.7 [ 24805 ]
Fix Version/s	10.8 [ 26121 ]
Resolution		Fixed [ 1 ]
Status	Stalled [ 10000 ]	Closed [ 6 ]

People

Assignee:: Anel Husakovic

Reporter:: Elena Stepanova

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Dates

Created:: 2022-05-02 15:35

Updated:: 2022-10-25 07:45

Resolved:: 2022-10-18 07:34

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.

MariaDB Server

Details

Description

Attachments

Issue Links

Activity

People

Dates

Git Integration