Details
-
Bug
-
Status: Closed (View Workflow)
-
Minor
-
Resolution: Not a Bug
-
10.11.8
-
Debian Ubuntu 22.04
Description
After upgrading from 10.3.34 to 10.11.8, a SELECT Granted user is no more able to read rows from the referential_constraints table.
I needed to change the GRANT from :
CREATE USER 'readonly'@'%' IDENTIFIED BY 'readonly'; |
GRANT SELECT ON *.* TO 'readonly'@'%'; |
FLUSH PRIVILEGES; |
To :
CREATE USER 'readonly'@'%' IDENTIFIED BY 'readonly'; |
GRANT USAGE ON *.* TO `readonly`@`%`; |
GRANT SELECT, REFERENCES, CREATE TEMPORARY TABLES, LOCK TABLES, SHOW VIEW ON `some_db`.* TO `readonly`@`%`; |
FLUSH PRIVILEGES; |
With SELECT GRANT, this query returns empty set :
SELECT * FROM `REFERENTIAL_CONSTRAINTS |
With the new GRANT, the same query returns the expected results.
Maybe this is a new feature, but I could not find any reference of this change in the changelogs.
Attachments
Issue Links
- is caused by
-
MDEV-32500 Information schema leaks table names and structure to unauthorized users
- Closed