[MDEV-25300] Connect - anonymous user can create table but cannot replace Created: 2021-03-30  Updated: 2021-04-23  Resolved: 2021-04-09

Status: Closed
Project: MariaDB Server
Component/s: Storage Engine - Connect
Affects Version/s: 10.2.37
Fix Version/s: 10.2.38, 10.3.29, 10.4.19, 10.5.10

Type: Bug Priority: Major
Reporter: Anel Husakovic Assignee: Olivier Bertrand
Resolution: Fixed Votes: 0
Labels: None

Issue Links:
Relates
relates to MDEV-25298 Connect REST - use cURL with/without ... Closed

 Description   

MariaDB [test]> select current_user;
+--------------+
| current_user |
+--------------+
| @localhost   |
+--------------+
MariaDB [test]> create or replace table t1 engine=connect table_type=JSON file_name='users.json' http='http://jsonplaceholder.typicode.com' uri='users' option_list='curl=0';
Query OK, 0 rows affected (0.19 sec)
MariaDB [test]> create or replace table t1 engine=connect table_type=JSON file_name='users.json' http='http://jsonplaceholder.typicode.com' uri='users' option_list='curl=0';
ERROR 1227 (42000): Access denied; you need (at least one of) the FILE privilege(s) for this operation



 Comments   
Comment by Olivier Bertrand [ 2021-04-09 ]

Does not occur anymore

Generated at Thu Feb 08 09:36:39 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.