[MDEV-9610] Trigger on normal table can't insert into CONNECT engine table - Access Denied - Jira

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Major
Resolution: Fixed
Affects Version/s: 10.0(EOL), 10.1(EOL)
Fix Version/s: 10.0.25, 10.1.14
Component/s: Authentication and Privilege System, Storage Engine - Connect
Labels:
- connect-engine
Environment:
CentOS7 on Google Cloud, unixODBC 2.3.1 all tested drivers

Sprint:
10.0.25

Description

If you add an AFTER INSERT trigger on an Innodb table that simply tries to insert a record into a CONNECT table, adding a record to the Innodb table fails with:

Access denied for user 'root'@'localhost' (using password: YES)

Attachments

Activity

Ascending order - Click to sort in descending order

Robert Dyas created issue - 2016-02-23 02:13

Elena Stepanova made changes - 2016-02-23 16:13

Field	Original Value	New Value
Status	Open [ 1 ]	Confirmed [ 10101 ]

Elena Stepanova added a comment - 2016-02-23 16:21

Thanks for the report.

create table tcon (i int) engine=Connect table_type=DOS file_name='tcon.dos';

# Query OK, 0 rows affected (0.14 sec)

create table tin (i int) engine=InnoDB;

# Query OK, 0 rows affected (0.49 sec)

create trigger tr after insert on tin for each row insert into tcon values (new.i);

# Query OK, 0 rows affected (0.04 sec)

insert into tin values (1);

# ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)

# insert into tcon works all right:

insert into tcon values (1);

# Query OK, 1 row affected (0.00 sec)

Elena Stepanova added a comment - 2016-02-23 16:21 Thanks for the report. create table tcon (i int) engine=Connect table_type=DOS file_name='tcon.dos'; # Query OK, 0 rows affected (0.14 sec) create table tin (i int) engine=InnoDB; # Query OK, 0 rows affected (0.49 sec) create trigger tr after insert on tin for each row insert into tcon values (new.i); # Query OK, 0 rows affected (0.04 sec) insert into tin values (1); # ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO) # insert into tcon works all right: insert into tcon values (1); # Query OK, 1 row affected (0.00 sec)

Elena Stepanova made changes - 2016-02-23 16:21

Fix Version/s		10.1 [ 16100 ]
Affects Version/s		10.0 [ 16000 ]
Affects Version/s		10.1 [ 16100 ]
Assignee		Olivier Bertrand [ bertrandop ]

Olivier Bertrand added a comment - 2016-02-24 01:11

The error occurs in the Connect function check_privileges in which a test is done to check whether the user has the FILE privilege. This test is made against the value of table->grant.privilege that is supposed to contain a bitmap of all the user privileges.

What happens is in the case of the table written from a trigger, this variable is apparently not set. This is why the writing fails and Connect issues a message saying "This operation requires the FILE privilege" that can be seen on the log file or on the console.

This reaction is normal and this does not seem to be a Connect bug but a MariaDB bug.

Olivier Bertrand added a comment - 2016-02-24 01:11 The error occurs in the Connect function check_privileges in which a test is done to check whether the user has the FILE privilege. This test is made against the value of table->grant.privilege that is supposed to contain a bitmap of all the user privileges. What happens is in the case of the table written from a trigger, this variable is apparently not set. This is why the writing fails and Connect issues a message saying "This operation requires the FILE privilege" that can be seen on the log file or on the console. This reaction is normal and this does not seem to be a Connect bug but a MariaDB bug.

Elena Stepanova made changes - 2016-02-24 01:17

Assignee

Olivier Bertrand [ bertrandop ]

Sergei Golubchik [ serg ]

Elena Stepanova made changes - 2016-02-24 01:17

Component/s

Authentication and Privilege System [ 13101 ]

Robert Dyas added a comment - 2016-04-15 17:36

Any idea when this might be resolved? Important to some of our use cases.

Robert Dyas added a comment - 2016-04-15 17:36 Any idea when this might be resolved? Important to some of our use cases.

Sergei Golubchik made changes - 2016-04-15 19:20

Affects Version/s

10.1.11 [ 21202 ]

Sergei Golubchik made changes - 2016-04-15 19:21

Priority

Minor [ 4 ]

Major [ 3 ]

Sergei Golubchik made changes - 2016-04-15 19:21

Fix Version/s

10.0 [ 16000 ]

Sergei Golubchik added a comment - 2016-04-15 19:21

Hopefully, in the next 10.1 release

Sergei Golubchik added a comment - 2016-04-15 19:21 Hopefully, in the next 10.1 release

Sergei Golubchik made changes - 2016-04-19 12:43

Sprint

10.0.25 [ 50 ]

Sergei Golubchik made changes - 2016-04-21 19:26

Status

Confirmed [ 10101 ]

In Progress [ 3 ]

Sergei Golubchik made changes - 2016-04-25 16:42

Assignee	Sergei Golubchik [ serg ]	Alexander Barkov [ bar ]
Status	In Progress [ 3 ]	In Review [ 10002 ]

Alexander Barkov made changes - 2016-04-26 14:24

Assignee	Alexander Barkov [ bar ]	Sergei Golubchik [ serg ]
Status	In Review [ 10002 ]	Stalled [ 10000 ]

Sergei Golubchik made changes - 2016-04-26 15:01

Fix Version/s		10.0.25 [ 21701 ]
Fix Version/s		10.1.14 [ 21804 ]
Fix Version/s	10.0 [ 16000 ]
Fix Version/s	10.1 [ 16100 ]
Resolution		Fixed [ 1 ]
Status	Stalled [ 10000 ]	Closed [ 6 ]

Sergei Golubchik made changes - 2021-12-06 21:42

Workflow

MariaDB v3 [ 74100 ]

MariaDB v4 [ 150142 ]

People

Assignee:: Sergei Golubchik

Reporter:: Robert Dyas

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 2016-02-23 02:13

Updated:: 2016-04-26 19:03

Resolved:: 2016-04-26 15:01

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.

MariaDB Server