[MDEV-24297] Trigger Definer Already Same But User Still Denied Created: 2020-11-27  Updated: 2020-11-27

Status: Open
Project: MariaDB Server
Component/s: Triggers
Affects Version/s: 10.4.8
Fix Version/s: None

Type: Bug Priority: Major
Reporter: febriyant Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: GRANT, Triggers, definer
Environment:

CentOS 7


 Description   

currently I already have user like this 'app_user'@'10.148.0.0/255.255.240.0' and I have the trigger with definer like this

CREATE DEFINER=`app_user`@`10.148.0.0/255.255.240.0` TRIGGER usertable_delete_audit

but when apps insert data i got this error

trigger command denied to user 'app_user'@'10.148.0.0/255.255.240.0' for table user table.

and i tried create or replace the trigger using user app_user i got error message 

Access denied; you need (at least one of) the SUPER privileges for this operation

this is grant for user app_user

GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON

this impact from user with specific host ? i mean because the user have grant like this 10.148.0.0/255.255.240.0. And the trigger only can give the access from specific ip


Generated at Thu Feb 08 09:28:55 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.