diff options
| author | Sergey Glukhov <Sergey.Glukhov@sun.com> | 2009-06-25 15:52:50 +0500 |
|---|---|---|
| committer | Sergey Glukhov <Sergey.Glukhov@sun.com> | 2009-06-25 15:52:50 +0500 |
| commit | 5eab9716ba7e335824ee373780f623355627d25b (patch) | |
| tree | 110d33c36b9cead9673ed59e6d99bd2964dee00d /sql/sql_show.cc | |
| parent | 1d9b7877fc099c4e6f018c4da0014e042f64ce78 (diff) | |
| download | mariadb-git-5eab9716ba7e335824ee373780f623355627d25b.tar.gz | |
Bug#45412 SHOW CREATE TRIGGER does not require privileges to disclose trigger data
Added privilege checking to SHOW CREATE TRIGGER code.
mysql-test/r/trigger_notembedded.result:
test result
mysql-test/t/trigger_notembedded.test:
test case
sql/sql_show.cc:
Added privilege checking to SHOW CREATE TRIGGER code.
Diffstat (limited to 'sql/sql_show.cc')
| -rw-r--r-- | sql/sql_show.cc | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/sql/sql_show.cc b/sql/sql_show.cc index 3964e38db5e..d07e951bfd1 100644 --- a/sql/sql_show.cc +++ b/sql/sql_show.cc @@ -7071,6 +7071,12 @@ bool show_create_trigger(THD *thd, const sp_name *trg_name) if (!lst) return TRUE; + if (check_table_access(thd, TRIGGER_ACL, lst, 1, TRUE)) + { + my_error(ER_SPECIFIC_ACCESS_DENIED_ERROR, MYF(0), "TRIGGER"); + return TRUE; + } + /* Open the table by name in order to load Table_triggers_list object. |