Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-6382

ANALYZE $stmt and security

Details

    Description

      (filing this based on discussion with Sanja)

      EXPLAIN has a special relationship with security. EXPLAIN over query with
      VIEWs will expose information about the structure of the VIEWs. Because of this, EXPLAIN checks SHOW_VIEW_ACL for every view it opens (code-wise, this is done in open_table)

      ANALYZE-statement produces EXPLAIN output, so it should require the same permissions. It needs to also require permissions that are needed for execution.

      See also: view_grant.test

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MDEV-6388 ANALYZE $stmt output in the slow query log

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-7025 ANALYZE SELECT/INSERT/UPDATE/DELETE from a view does not check access permissions on the underlying table

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-7027 ANALYZE SELECT/INSERT/UPDATE/DELETE from a view does not check SHOW permission on the view

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-406 ANALYZE $stmt

          • Major - Major loss of function.
          • Closed

          Activity

            People

              psergei Sergei Petrunia
              psergei Sergei Petrunia
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.