Commit 3616b913 authored by unknown's avatar unknown

Bug#32710: SHOW INNODB STATUS requires SUPER

Changed "SHOW ENGINE ... STATUS" and "SHOW ENGINE ... MUTEX"
to require the PROCESS privilege, instead of SUPER.

Fixed by Damien Katz


mysql-test/r/show_check.result:
  Add test case result for Bug#32710
mysql-test/t/show_check.test:
  Add test case for Bug#32710
sql/sql_parse.cc:
  Require PROCESS privilege instead of SUPER.
parent ee42ff63
...@@ -1427,4 +1427,9 @@ DROP FUNCTION f1; ...@@ -1427,4 +1427,9 @@ DROP FUNCTION f1;
DROP TABLE t1; DROP TABLE t1;
DROP EVENT ev1; DROP EVENT ev1;
SHOW TABLE TYPES; SHOW TABLE TYPES;
CREATE USER test_u@localhost;
GRANT PROCESS ON *.* TO test_u@localhost;
SHOW ENGINE MYISAM MUTEX;
SHOW ENGINE MYISAM STATUS;
DROP USER test_u@localhost;
End of 5.1 tests End of 5.1 tests
...@@ -1115,5 +1115,24 @@ DROP EVENT ev1; ...@@ -1115,5 +1115,24 @@ DROP EVENT ev1;
SHOW TABLE TYPES; SHOW TABLE TYPES;
--enable_result_log --enable_result_log
#
# Bug #32710: SHOW INNODB STATUS requires SUPER
#
CREATE USER test_u@localhost;
GRANT PROCESS ON *.* TO test_u@localhost;
connect (conn1, localhost, test_u,,);
--disable_result_log
SHOW ENGINE MYISAM MUTEX;
SHOW ENGINE MYISAM STATUS;
--enable_result_log
disconnect conn1;
connection default;
DROP USER test_u@localhost;
--echo End of 5.1 tests --echo End of 5.1 tests
...@@ -2271,14 +2271,14 @@ mysql_execute_command(THD *thd) ...@@ -2271,14 +2271,14 @@ mysql_execute_command(THD *thd)
#endif /* HAVE_REPLICATION */ #endif /* HAVE_REPLICATION */
case SQLCOM_SHOW_ENGINE_STATUS: case SQLCOM_SHOW_ENGINE_STATUS:
{ {
if (check_global_access(thd, SUPER_ACL)) if (check_global_access(thd, PROCESS_ACL))
goto error; goto error;
res = ha_show_status(thd, lex->create_info.db_type, HA_ENGINE_STATUS); res = ha_show_status(thd, lex->create_info.db_type, HA_ENGINE_STATUS);
break; break;
} }
case SQLCOM_SHOW_ENGINE_MUTEX: case SQLCOM_SHOW_ENGINE_MUTEX:
{ {
if (check_global_access(thd, SUPER_ACL)) if (check_global_access(thd, PROCESS_ACL))
goto error; goto error;
res = ha_show_status(thd, lex->create_info.db_type, HA_ENGINE_MUTEX); res = ha_show_status(thd, lex->create_info.db_type, HA_ENGINE_MUTEX);
break; break;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment