[MDEV-29509] execute granted indirectly (via roles) doesn't always work - Jira

XML

Word

Printable

Type: Bug
Status: Closed (View Workflow)
Priority: Critical
Resolution: Fixed
Affects Version/s: 10.3(EOL), 10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL), 10.9(EOL)
Fix Version/s: 10.3.37, 10.4.27, 10.5.18, 10.6.11, 10.7.7, 10.8.6, 10.9.4, 10.10.2
Component/s: Authentication and Privilege System
Labels:
None

create procedure p1 () select 1;

create role r1, r2;

grant r1 to r2;

create user foo@localhost;

grant r2 to foo@localhost;

grant execute on procedure test.p1 to r1;

#grant alter routine on procedure test.p1 to r2;

connect foo,localhost,foo;

set role r2;

show grants;

call p1();

this test succeeds, call p1() is allowed. but if grant alter routine is uncommented, the test fails.

blocks

MDEV-14443 DENY clause for access control a.k.a. "negative grants"

relates to

MDEV-29458 Role grant commands do not propagate all grants

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.