Porting back security fix from 4.0.

All tests plus grant.pl test passed.

sql/sql_base.cc

@@ -1878,8 +1878,9 @@ insert_fields(THD *thd,TABLE_LIST *tables, const char *db_name,
   for (; tables ; tables=tables->next)
   {
     TABLE *table=tables->table;
-    if (grant_option && !thd->master_access &&
-	check_grant_all_columns(thd,SELECT_ACL,table) )
+    if (grant_option && !(table->grant.privilege &
+			  table->grant.want_privilege) &&
+	check_grant_all_columns(thd,SELECT_ACL,table))
       DBUG_RETURN(-1);
     if (!table_name || (!strcmp(table_name,tables->alias) &&
 			(!db_name || !tables->db ||