[MDEV-14853] Grant does not work correctly when table contains SYSTEM_INVISIBLE or COMPLETELY_INVISIBLE Created: 2018-01-02  Updated: 2018-05-18  Resolved: 2018-05-18

Status: Closed
Project: MariaDB Server
Component/s: Server
Affects Version/s: 10.3.3
Fix Version/s: 10.3.7

Type: Bug Priority: Major
Reporter: Sachin Setiya (Inactive) Assignee: Sachin Setiya (Inactive)
Resolution: Fixed Votes: 0
Labels: None
Environment:

all

Issue Links:
Relates
relates to MDEV-15959 Column-level permissions and system v... Closed
Sprint: 10.3.6-1

 Description   

Column level GRANT does not work correctly when table contains and SYSTEM_INVISIBLE or COMPLETELY_INVISIBLE column.
Suppose a table t1 , which has a SYSTEM_INVISIBLE column and a normal column A. We give a grant to user_1 with this command 

grant insert(a) on t1 to user_1;

when this particular user try insert

insert into t1(a) values(1);

or 

insert into t1 values(1);

he will get access denied error.

 Comments   
Comment by Elena Stepanova [ 2018-01-02 ]

I've found the opening of this discussion on December 7th, but can't find what was answered:

elenst [23:04]
@serg: @sachin: another small thing, now with grants. Say, we have a table `t1` with one normal visible column `a` and invisible column(s) of any type; and a user with `GRANT INSERT (a) ON t1`. Such a user cannot do `INSERT INTO t1 VALUES (...)`

[23:05]
it can be rationalized, with a claim a user with column-level grants should specify those columns, but it wasn't necessary before, if the user actually had grants for all columns

[23:10]
and for a user-level invisible it's fine, as it should probably be granted as a normal column; with system-level it's... strange, because it turns out it can also be granted – again, not sure if it's by design; with completely invisible it might prove problematic

Comment by Sachin Setiya (Inactive) [ 2018-01-02 ]

Hi elenst,
Actually there was no reply to that , sorry. But I and serg agreed that there is problem.

Comment by Sachin Setiya (Inactive) [ 2018-04-26 ]

http://lists.askmonty.org/pipermail/commits/2018-April/012463.html

buildbot bb-10.3-sachin

Generated at Thu Feb 08 08:16:47 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.