[MDEV-12482] After granting EXECUTE right with wildcard in dbname SELECT, INSERT, UPDATE and DELETE privileges can no longer be executed Created: 2017-04-10  Updated: 2017-06-05  Resolved: 2017-05-15

Status: Closed
Project: MariaDB Server
Component/s: Authentication and Privilege System
Affects Version/s: 10.1.20
Fix Version/s: N/A

Type: Bug Priority: Major
Reporter: Ulrich Moser (Inactive) Assignee: Unassigned
Resolution: Incomplete Votes: 0
Labels: EXECUTE, GRANT, need_feedback, privileges, wildcards
Environment:

Ubuntu Linux 16.04.1 LTS x64, KVM, Centos 7, VMWare


Issue Links:
Relates
relates to MDEV-11929 During delete: InnoDB: Assertion fail... Closed

 Description   

Sample:
GRANT SELECT, INSERT, UPDATE, DELETE ON test_1.* to user1@'192.168.122.10%';
user1 can SELECT, INSERT, UPDATE and SELECT on tables in database test_1.
After adding
grant execute on `test_%`.* to user1@'192.168.122.10%';
user1 gets permission denied when trying to access a table in test_1.
Customer environment has several databases all with a suffix per client company and DBA wanted to grant EXECUTE permission for all databases in one statement.
Workaround in this case:
Explicitly GRANT EXECUTE for each database.



 Comments   
Comment by Elena Stepanova [ 2017-04-11 ]

I can't reproduce it right away, at least on the current 10.1.
What does SHOW GRANTS say when you connect as user1?

Please also attach your cnf file(s), maybe there is something in there.

Generated at Thu Feb 08 07:58:04 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.