Details
-
Bug
-
Status: In Review (View Workflow)
-
Critical
-
Resolution: Unresolved
-
10.5, 10.6, 10.11, 11.4, 11.8
-
None
Description
--source include/not_embedded.inc
|
|
create user 'probsolvdbuser_dev'@'localhost';
|
CREATE DATABASE problsolvdbdev;
|
GRANT INSERT, UPDATE, ALTER ON problsolvdbdev.* TO 'probsolvdbuser_dev'@'localhost';
|
USE problsolvdbdev;
|
CREATE SEQUENCE seq_test START WITH 100 INCREMENT BY 10;
|
CREATE TABLE action_1 (id int);
|
|
connect (conn1,localhost,probsolvdbuser_dev,,problsolvdbdev,);
|
|
alter table action_1 modify `id` int(11) NOT NULL DEFAULT nextval(`seq_test`);
|
|
connection default;
|
drop user 'probsolvdbuser_dev'@'localhost';
|
drop databese problsolvdbdev;
|
Attachments
Issue Links
- is blocked by
-
MDEV-36413 User without any privileges to a sequence can read from it and modify it via column default
-
- Closed
-
- relates to
-
MDEV-36380 User has unauthorized access to a sequence through a view with security invoker
-
- Closed
-
Activity
Field | Original Value | New Value |
---|---|---|
Description |
{code}
--source include/not_embedded.inc create user 'probsolvdbuser_dev'@'localhost'; CREATE DATABASE problsolvdbdev; GRANT INSERT, UPDATE, ALTER ON problsolvdbdev.* TO 'probsolvdbuser_dev'@'localhost'; USE problsolvdbdev; CREATE SEQUENCE seq_test START WITH 100 INCREMENT BY 10; CREATE TABLE action_1 (id int); connect (conn1,localhost,probsolvdbuser_dev,,problsolvdbdev,); alter table action_1 modify `id` int(11) NOT NULL DEFAULT nextval(`seq_test`); connect default; drop user 'probsolvdbuser_dev'@'localhost'; drop databese problsolvdbdev; {code} |
{code}
--source include/not_embedded.inc create user 'probsolvdbuser_dev'@'localhost'; CREATE DATABASE problsolvdbdev; GRANT INSERT, UPDATE, ALTER ON problsolvdbdev.* TO 'probsolvdbuser_dev'@'localhost'; USE problsolvdbdev; CREATE SEQUENCE seq_test START WITH 100 INCREMENT BY 10; CREATE TABLE action_1 (id int); connect (conn1,localhost,probsolvdbuser_dev,,problsolvdbdev,); alter table action_1 modify `id` int(11) NOT NULL DEFAULT nextval(`seq_test`); connect default; drop user 'probsolvdbuser_dev'@'localhost'; drop databese problsolvdbdev; {code} TODO: check CREATE TABLE |
Affects Version/s | 10.6 [ 24028 ] |
Fix Version/s | 10.6 [ 24028 ] |
Affects Version/s | 10.11 [ 27614 ] | |
Affects Version/s | 11.4 [ 29301 ] | |
Affects Version/s | 11.8 [ 29921 ] |
Affects Version/s | 10.5 [ 23123 ] |
Fix Version/s | 10.5 [ 23123 ] |
Description |
{code}
--source include/not_embedded.inc create user 'probsolvdbuser_dev'@'localhost'; CREATE DATABASE problsolvdbdev; GRANT INSERT, UPDATE, ALTER ON problsolvdbdev.* TO 'probsolvdbuser_dev'@'localhost'; USE problsolvdbdev; CREATE SEQUENCE seq_test START WITH 100 INCREMENT BY 10; CREATE TABLE action_1 (id int); connect (conn1,localhost,probsolvdbuser_dev,,problsolvdbdev,); alter table action_1 modify `id` int(11) NOT NULL DEFAULT nextval(`seq_test`); connect default; drop user 'probsolvdbuser_dev'@'localhost'; drop databese problsolvdbdev; {code} TODO: check CREATE TABLE |
{code}
--source include/not_embedded.inc create user 'probsolvdbuser_dev'@'localhost'; CREATE DATABASE problsolvdbdev; GRANT INSERT, UPDATE, ALTER ON problsolvdbdev.* TO 'probsolvdbuser_dev'@'localhost'; USE problsolvdbdev; CREATE SEQUENCE seq_test START WITH 100 INCREMENT BY 10; CREATE TABLE action_1 (id int); connect (conn1,localhost,probsolvdbuser_dev,,problsolvdbdev,); alter table action_1 modify `id` int(11) NOT NULL DEFAULT nextval(`seq_test`); connection default; drop user 'probsolvdbuser_dev'@'localhost'; drop databese problsolvdbdev; {code} |
Assignee | Oleksandr Byelkin [ sanja ] | Vladislav Vaintroub [ wlad ] |
Status | Open [ 1 ] | Confirmed [ 10101 ] |
Assignee | Vladislav Vaintroub [ wlad ] | Oleksandr Byelkin [ sanja ] |
Status | Confirmed [ 10101 ] | In Review [ 10002 ] |
Link |
This issue relates to |
Link |
This issue is blocked by |
Fix Version/s | 10.6 [ 24028 ] | |
Fix Version/s | 10.11 [ 27614 ] | |
Fix Version/s | 11.4 [ 29301 ] |
CREATE looks like working, test here:
--source include/not_embedded.inc
create user 'probsolvdbuser_dev'@'localhost';
CREATE DATABASE problsolvdbdev;
GRANT INSERT, UPDATE, CREATE ON problsolvdbdev.* TO 'probsolvdbuser_dev'@'localhost';
USE problsolvdbdev;
CREATE SEQUENCE seq_test START WITH 100 INCREMENT BY 10;
connect (conn1,localhost,probsolvdbuser_dev,,problsolvdbdev,);
create table action_1 ( `id` int(11) NOT NULL DEFAULT nextval(`seq_test`));
connection default;
drop user 'probsolvdbuser_dev'@'localhost';
drop databese problsolvdbdev;