Table-level privilege checks are bypassed for a global temporary table (GTT) created with the ON COMMIT PRESERVE ROWS option

create user u@localhost;

create global temporary table test.g (id int primary key, v int)

  on commit preserve rows;

grant select, insert on test.g to u@localhost;

--connect (c, localhost, u,,test)

show grants;

insert into g values (1,10);

--echo # Actual : UPDATE without UPDATE privilege succeeds. Expected ER_TABLEACCESS_DENIED_ERROR 

update g set v = 999 where id = 1;

--echo # Actual : DELETE without DELETE privilege succeeds. Expected ER_TABLEACCESS_DENIED_ERROR 

delete from g where id = 1;

insert into g values (2,20);

--echo # Actual : TRUNCATE without DROP privilege succeeds. Expected ER_TABLEACCESS_DENIED_ERROR

truncate g;

--disconnect c

create user u@localhost;

create global temporary table test.g (id int primary key, v int)

on commit preserve rows;

grant select, insert on test.g to u@localhost;

connect  c, localhost, u,,test;

show grants;

Grants for u@localhost

GRANT USAGE ON *.* TO `u`@`localhost`

GRANT SELECT, INSERT ON `test`.`g` TO `u`@`localhost`

insert into g values (1,10);

# Actual : UPDATE without UPDATE privilege succeeds. Expected ER_TABLEACCESS_DENIED_ERROR

update g set v = 999 where id = 1;

# Actual : DELETE without DELETE privilege succeeds. Expected ER_TABLEACCESS_DENIED_ERROR

delete from g where id = 1;

insert into g values (2,20);

# Actual : TRUNCATE without DROP privilege succeeds. Expected ER_TABLEACCESS_DENIED_ERROR

truncate g;

disconnect c;