diff options
| author | Alexander Barkov <bar@mariadb.com> | 2020-02-28 21:59:01 +0400 |
|---|---|---|
| committer | Alexander Barkov <bar@mariadb.com> | 2020-03-10 23:49:47 +0400 |
| commit | a1e330de5a37f88339f4a5b46231a41eb60f43d2 (patch) | |
| tree | a1ce4b2187f728dcf94478562c8ea272608cb911 /mysql-test/main/grant_server.result | |
| parent | 91ba789aaf8feffb9ad377c740759b2359c5a094 (diff) | |
| download | mariadb-git-a1e330de5a37f88339f4a5b46231a41eb60f43d2.tar.gz | |
MDEV-21743 Split up SUPER privilege to smaller privileges
Diffstat (limited to 'mysql-test/main/grant_server.result')
| -rw-r--r-- | mysql-test/main/grant_server.result | 61 |
1 files changed, 61 insertions, 0 deletions
diff --git a/mysql-test/main/grant_server.result b/mysql-test/main/grant_server.result new file mode 100644 index 00000000000..37b5f67ba4b --- /dev/null +++ b/mysql-test/main/grant_server.result @@ -0,0 +1,61 @@ +# +# Start of 10.5 tests +# +# +# Test that SERVER DDL statements are not allowed without FEDERATED ADMIN or SUPER +# +CREATE USER user1@localhost IDENTIFIED BY ''; +GRANT ALL PRIVILEGES ON *.* TO user1@localhost; +REVOKE FEDERATED ADMIN, SUPER ON *.* FROM user1@localhost; +connect con1,localhost,user1,,; +connection con1; +CREATE SERVER IF NOT EXISTS server_1 +FOREIGN DATA WRAPPER mysql +OPTIONS (USER 'mysqltest_1', HOST 'localhost', DATABASE 'test2'); +ERROR 42000: Access denied; you need (at least one of) the SUPER, FEDERATED ADMIN privilege(s) for this operation +ALTER SERVER server_1 OPTIONS(HOST 'Server.Example.Org'); +ERROR 42000: Access denied; you need (at least one of) the SUPER, FEDERATED ADMIN privilege(s) for this operation +DROP SERVER server_1; +ERROR 42000: Access denied; you need (at least one of) the SUPER, FEDERATED ADMIN privilege(s) for this operation +disconnect con1; +connection default; +DROP USER user1@localhost; +# +# Test that SERVER DDL statements are allowed with FEDERATED ADMIN +# +CREATE USER user1@localhost IDENTIFIED BY ''; +GRANT FEDERATED ADMIN ON *.* TO user1@localhost; +SHOW GRANTS FOR user1@localhost; +Grants for user1@localhost +GRANT FEDERATED ADMIN ON *.* TO `user1`@`localhost` +connect con1,localhost,user1,,; +connection con1; +CREATE SERVER IF NOT EXISTS server_1 +FOREIGN DATA WRAPPER mysql +OPTIONS (USER 'mysqltest_1', HOST 'localhost', DATABASE 'test2'); +ALTER SERVER server_1 OPTIONS(HOST 'Server.Example.Org'); +DROP SERVER server_1; +disconnect con1; +connection default; +DROP USER user1@localhost; +# +# Test that SERVER DDL statements are allowed with SUPER +# +CREATE USER user1@localhost IDENTIFIED BY ''; +GRANT SUPER ON *.* TO user1@localhost; +SHOW GRANTS FOR user1@localhost; +Grants for user1@localhost +GRANT SUPER ON *.* TO `user1`@`localhost` +connect con1,localhost,user1,,; +connection con1; +CREATE SERVER IF NOT EXISTS server_1 +FOREIGN DATA WRAPPER mysql +OPTIONS (USER 'mysqltest_1', HOST 'localhost', DATABASE 'test2'); +ALTER SERVER server_1 OPTIONS(HOST 'Server.Example.Org'); +DROP SERVER server_1; +disconnect con1; +connection default; +DROP USER user1@localhost; +# +# End of 10.5 tests +# |