• Alexander Nozdrin's avatar
    Backporting patches for Bug#38347 (ALTER ROUTINE privilege · 09195da3
    Alexander Nozdrin authored
    allows SHOW CREATE TABLE) from 6.0. Original revisions:
    ------------------------------------------------------------
    revno: 2617.31.8
    committer: Alexander Nozdrin <alik@sun.com>
    branch nick: 6.0-rt-bug38347
    timestamp: Thu 2009-03-26 09:08:24 +0300
    message:
      Patch for Bug#38347: ALTER ROUTINE privilege allows SHOW CREATE TABLE.
      
      If a user has any of the following privileges for a table (or the database
      if the table), he should be able to issue SHOW CREATE TABLE for the table:
        - CREATE
        - DROP
        - ALTER
        - DELETE
        - INDEX
        - INSERT
        - SELECT
        - UPDATE
        - TRIGGER
        - REFERENCES
        - GRANT OPTION
        - CREATE VIEW
        - SHOW VIEW
      
      Any other privilege (even SUPER) should not allow SHOW CREATE TABLE.
    ------------------------------------------------------------
    revno: 2617.31.11
    committer: Alexander Nozdrin <alik@sun.com>
    branch nick: 6.0-rt
    timestamp: Fri 2009-03-27 21:36:34 +0300
    message:
      Additional patch for Bug#38347 (ALTER ROUTINE privilege
      allows SHOW CREATE TABLE).
      
      The problem was that information_schema.test,
      information_schema_parameters.test and information_schema_routines.test
      failed with the first patch. That happened due to limitation in check_access():
      it allows only SELECT_ACL privilege for INFORMATION_SCHEMA tables.
      
      The patch is to request only SELECT_ACL privilege for INFORMATION_SCHEMA tables.
    ------------------------------------------------------------
    09195da3
bug38347.inc 404 Bytes