• Karthik Kamath's avatar
    BUG#27160888: MISSING FILE PRIVILEDGE CHECKS ON SOME · 2af9e8af
    Karthik Kamath authored
                  STATEMENTS
    
    ANALYSIS:
    =========
    A user not having FILE privilege is not allowed to create
    custom data/index directories for a table or for its
    partitions via CREATE TABLE but is allowed to do so via
    ALTER TABLE statement.
    
    ALTER TABLE ignores DATA DIRECTORY and INDEX DIRECTORY when
    given as table options. The issue occurs during the
    creation of partitions for a table via ALTER TABLE
    statement with the DATA DIRECTORY and/or INDEX DIRECTORY
    options. The issue exists because of the absence of FILE
    privilege check for the user.
    
    FIX:
    ====
    A FILE privilege check has been introduced for resolving
    the above scenario.
    2af9e8af
sql_alter.cc 4.78 KB