Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-36421

The results from information_schema.tables have changed in version 10.6.21

Details

    Description

      Maria DB 10.6.21にバージョンアップしたところ、特定スキーマのみ権限を与えたユーザーで
      `information_schema`.`tables` からのデータ取得を実行すると、下記3テーブルが取得可能に挙動が変わりました。
      (10.6.20以前では取得できませんでした)

      • performance_schema.global_status
      • performance_schema.session_account_connect_attrs
      • performance_schema.session_status

      performance_schemaの他のテーブルは変わらず取得されません。
      これは意図しない変更ではないでしょうか?

      利用したSQLは下記です。

      SELECT CONCAT(`table_schema`, '.', `table_name`) AS `name` 
      FROM `information_schema`.`tables` 
      WHERE (`table_type` = 'BASE TABLE') 
      

      また、記載の3テーブルについては、10.6.12 で確認したところ、上記SQLで取得はされないものの、 performance_schemaに権限を付与していないにも拘らずに、selectでエラーになりませんでした。

      例)

      select * from performance_schema.session_account_connect_attrs
      

      → success!

      select * from performance_schema.accounts
      

      → SELECT command denied to user 'xxx'@'xxx.xxx.xx.x' for table `performance_schema`.`accounts`

      ご確認お願いします。
      ==========================

      After upgrading to Maria DB 10.6.21, when a user with permissions granted only to a specific schema retrieves data from `information_schema`.`tables`, the following three tables can now be retrieved. (This was not possible prior to version 10.6.20.)

      • performance_schema.global_status
      • performance_schema.session_account_connect_attrs
      • performance_schema.session_status

      Other tables in performance_schema are unchanged.
      Is this an unintended change?

      I used the following
      SQL:

      SELECT CONCAT(`table_schema`, '.', `table_name`) AS `name` 
      FROM `information_schema`.`tables` 
      WHERE (`table_type` = 'BASE TABLE') 
      

      In addition, when I checked with version 10.6.12, the three tables mentioned above were not retrieved with the above SQL, but no error occurred with the select even though permissions were not granted to performance_schema.

      例)

      select * from performance_schema.session_account_connect_attrs
      

      → success!

      select * from performance_schema.accounts
      

      → SELECT command denied to user 'xxx'@'xxx.xxx.xx.x' for table `performance_schema`.`accounts`

      Please confirm.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              sugi Kikuno Sugiyama
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.