[#MDEV-20549] SQL SECURITY DEFINER does not work for INFORMATION

[MDEV-20549] SQL SECURITY DEFINER does not work for INFORMATION_SCHEMA tables Created: 2019-09-10 Updated: 2019-10-28 Resolved: 2019-10-28
Status:	Closed
Project:	MariaDB Server
Component/s:	Authentication and Privilege System, Information Schema
Affects Version/s:	5.5, 10.1, 10.2, 10.3, 10.4
Fix Version/s:	10.2.28, 10.3.19, 10.4.9

Type:

Bug

Priority:

Major

Reporter:

Sergei Golubchik

Assignee:

Sergei Golubchik

Resolution:

Fixed

Votes:

Labels:

None

Issue Links:

PartOf
includes	~~MDEV-8545~~	Security definer views don't work wit...	Closed

Description

as root
create view processlist_as_root as select * from information_schema.processlist;

as unpriivleged user
select * from processlist_as_root;

does not show all connections, even though the view is SQL SECURITY DEFINER so it should show processlist under root privileges.

Same problem for I_S.TABLES, I_S.SCHEMATA, etc.

Generated at Thu Feb 08 09:00:19 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.