1. 20 Sep, 2007 1 commit
    • evgen@sunlight.local's avatar
      Bug#29908: A user can gain additional access through the ALTER VIEW. · ef75db8c
      evgen@sunlight.local authored
      Non-definer of a view was allowed to alter that view. Due to this the alterer
      can elevate his access rights to access rights of the view definer and thus
      modify data which he wasn't allowed to modify. A view defined with
      SQL SECURITY INVOKER can't be used directly for access rights elevation.
      But a user can first alter the view SQL code and then alter the view to 
      SQL SECURITY DEFINER and thus elevate his access rights. Due to this
      altering a view with SQL SECURITY INVOKER is also prohibited.
      
      Now the mysql_create_view function allows ALTER VIEW only to the view
      definer or a super user. 
      ef75db8c
  2. 13 Sep, 2007 1 commit
  3. 12 Sep, 2007 2 commits
  4. 11 Sep, 2007 1 commit
  5. 10 Sep, 2007 3 commits
  6. 06 Sep, 2007 1 commit
  7. 04 Sep, 2007 2 commits
  8. 03 Sep, 2007 8 commits
  9. 31 Aug, 2007 2 commits
    • gshchepa/uchum@gleb.loc's avatar
      Merge gleb.loc:/home/uchum/work/bk/5.0-opt-30126 · df7771de
      gshchepa/uchum@gleb.loc authored
      into  gleb.loc:/home/uchum/work/bk/5.0-opt
      df7771de
    • gshchepa/uchum@gleb.loc's avatar
      Fixed bug #30126. · 3e49bbd8
      gshchepa/uchum@gleb.loc authored
      When dumping database from a 4.x server, the mysqldump client
      inserted a delimiter sign inside special commentaries of the form:
        /*!... CREATE DATABASE IF NOT EXISTS ... ;*/
      During restoration that dump file was splitten by delimiter signs on
      the client side, and the rest of some commentary strings was prepended
      to following statements.
      
      The 4x_server_emul test case option has been added for use with the
      DBUG_EXECUTE_IF debugging macro. This option affects debug server
      builds only to emulate particular behavior of a 4.x server for
      the mysqldump client testing. Non-debugging builds are not affected.
      3e49bbd8
  10. 30 Aug, 2007 5 commits
  11. 29 Aug, 2007 14 commits