summaryrefslogtreecommitdiff
path: root/sql/sql_acl.h
Commit message (Collapse)AuthorAgeFilesLines
* Merge magare.gmz:/home/kgeorge/mysql/autopush/B26461-5.0-optgkodinov/kgeorge@magare.gmz2008-03-211-3/+3
|\ | | | | | | into magare.gmz:/home/kgeorge/mysql/work/B26461-5.1-opt
| * Bug #26461: Intrinsic data type bool (1 byte) redefined to BOOL (4 bytes)gkodinov/kgeorge@macbook.gmz2008-03-211-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The bool data type was redefined to BOOL (4 bytes on windows). Removed the #define and fixed some of the warnings that were uncovered by this. Note that the fix also disables 2 warnings : 4800 : 'type' : forcing value to bool 'true' or 'false' (performance warning) 4805: 'operation' : unsafe mix of type 'type' and type 'type' in operation These warnings will be handled in a separate bug, as they are performance related or bogus. Fixed to int the return type of functions that return more than 2 distinct values.
* | merged the fix for bug 30468 to 5.1-optgkodinov/kgeorge@magare.gmz2007-09-271-3/+2
|\ \ | |/
| * Bug #30468: column level privileges not respected when joining tablesgkodinov/kgeorge@magare.gmz2007-09-271-3/+2
| | | | | | | | | | | | | | | | When expanding a * in a USING/NATURAL join the check for table access for both tables in the join was done using the grant information of the first one. Fixed by getting the grant information for the current table while iterating through the columns of the join.
* | Merge pilot.blaudden:/home/msvensson/mysql/mysql-5.0-maintmsvensson@pilot.blaudden2007-03-191-2/+1
|\ \ | |/ | | | | into pilot.blaudden:/home/msvensson/mysql/mysql-5.1-maint
| * Bug#20166 mysql-test-run.pl does not test system privilege tables creationmsvensson@pilot.blaudden2007-03-161-1/+1
| | | | | | | | | | | | | | - Build sql files for netware from the mysql_system_tables*.sq files - Fix comments about mysql_create_system_tables.sh - Use mysql_install_db.sh to create system tables for mysql_test-run-shell - Fix mysql-test-run.pl to also look in share/mysql for the msyql_system*.sql files
* | Merge mysql.com:/home/kent/bk/main/mysql-5.0kent@kent-amd64.(none)2006-12-311-1/+1
|\ \ | |/ | | | | into mysql.com:/home/kent/bk/main/mysql-5.1
| * my_strtoll10-x86.s:kent@mysql.com/kent-amd64.(none)2006-12-311-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Corrected spelling in copyright text Makefile.am: Don't update the files from BitKeeper Many files: Removed "MySQL Finland AB & TCX DataKonsult AB" from copyright header Adjusted year(s) in copyright header Many files: Added GPL copyright text Removed files: Docs/Support/colspec-fix.pl Docs/Support/docbook-fixup.pl Docs/Support/docbook-prefix.pl Docs/Support/docbook-split Docs/Support/make-docbook Docs/Support/make-makefile Docs/Support/test-make-manual Docs/Support/test-make-manual-de Docs/Support/xwf
* | Merge mysql.com:/home/kent/bk/main/mysql-5.0kent@kent-amd64.(none)2006-12-231-2/+1
|\ \ | |/ | | | | into mysql.com:/home/kent/bk/main/mysql-5.1
| * Many files:kent@mysql.com/kent-amd64.(none)2006-12-231-2/+1
| | | | | | | | Changed header to GPL version 2 only
* | Merge ua141d10.elisa.omakaista.fi:/home/my/bk/mysql-5.0jani@ua141d10.elisa.omakaista.fi2006-05-091-1/+0
|\ \ | |/ | | | | into ua141d10.elisa.omakaista.fi:/home/my/bk/mysql-5.1-new
| * Reapply fix for bug#16372 (Server crashes when test 'conc_sys' is running)kroki@mysql.com2006-05-061-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | after merge. Concurrent read and update of privilege structures (like simultaneous run of SHOW GRANTS and ADD USER) could result in server crash. Ensure that proper locking of ACL structures is done. No test case is provided because this bug can't be reproduced deterministically.
* | manual mergeandrey@lmy004.2006-02-141-0/+30
|\ \
| * | - final fixes for bug#16431 (Events: An event which alters itself disappears)andrey@lmy004.2006-02-141-0/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - fix for bug#16423 (Events: SHOW CREATE EVENT doesn't work) - this Changeset commits makes CREATE/UPDATE/DELETE EVENT real DDL statements by committing the currently open transaction before they are executed. - this Changeset also fixes a trailing space problem since the very early days of the internal cron - adds sophisticated checking of whether mysql.event was tampered accidentally or with purpose by an user. - adds a lot of inline function documentation - documents everything left uncodumented - INTERVAL_XXXX to XXX in I_S.EVENTS.INTERVAL_FIELD WL#1034 (Internal CRON)
* | | Addition to the fix for BUG#9412 "Triggers: should have trigger privilege".dlenev@mysql.com2006-02-011-0/+1
| | | | | | | | | | | | | | | When we add new privilege we should update mysql-test/lib/init_db.sql accordingly.
* | | Fix for BUG#9412: Triggers: should have trigger privilege.anozdrin@mysql.com2006-02-011-6/+10
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Implement table-level TRIGGER privilege to control access to triggers. Before this path global SUPER privilege was used for this purpose, that was the big security problem. In details, before this patch SUPER privilege was required: - for the user at CREATE TRIGGER time to create a new trigger; - for the user at DROP TRIGGER time to drop the existing trigger; - for the definer at trigger activation time to execute the trigger (if the definer loses SUPER privilege, all its triggers become unavailable); This patch changes the behaviour in the following way: - TRIGGER privilege on the subject table for trigger is required: - for the user at CREATE TRIGGER time to create a new trigger; - for the user at DROP TRIGGER time to drop the existing trigger; - for the definer at trigger activation time to execute the trigger (if the definer loses TRIGGER privilege on the subject table, all its triggers on this table become unavailable). - SUPER privilege is still required: - for the user at CREATE TRIGGER time to explicitly set the trigger definer to the user other than CURRENT_USER(). When the server works with database of the previous version (w/o TRIGGER privilege), or if the database is being upgraded from the previous versions, TRIGGER privilege is granted to whose users, who have CREATE privilege.
* | WL #1034 (Internal CRON)andrey@lmy004.2006-01-101-4/+8
|\ \ | | | | | | | | | merge before push
| * | WL#1034 updateandrey@lmy004.2005-12-151-2/+5
| | | | | | | | | | | | | | | | | | | | | - fix EVENT_ACL problem that GRANT ALL on some_db.* to someone@somewhere did not get to mysql.db - fix crash when the following is executed : CREATE EVENT P() CREATE EVENT E ON SCHEDULER 1 SECOND DO ROLLBACK; (creation works as well as calling P() which creates the event).
| * | WL#1034 updatedandrey@lmy004.2005-12-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | - split into several files - forbid parallel execution (before analyse is done how to make it possible) because the same sp_head instance cannot be executed in parallel - added GPL headers - changed EVENT_ACL to be per DB variable - fixed minor problems
| * | WL1034 update for latest 5.1 sourcesandrey@lmy004.2005-12-021-1/+2
| | |
* | | Merge mysql.com:/home/timka/mysql/src/5.0-2486timour@mysql.com2005-12-071-1/+3
|\ \ \ | |/ / |/| / | |/ into mysql.com:/home/timka/mysql/src/5.1-dbg
| * WL#2486 - natural/using joins according to SQL:2003timour@mysql.com2005-11-301-1/+3
| | | | | | | | | | | | | | Post-review fixes that simplify the way access rights are checked during name resolution and factor out all entry points to check access rights into one single function.
* | Mergetomas@poseidon.ndb.mysql.com2005-10-061-1/+2
|\ \ | |/
| * WL#2787 (Add view definer/owner to the view definition (.frm) to check ↵bell@sanja.is.com.ua2005-09-201-2/+2
| | | | | | | | | | | | privileges on used tables and stored routines when using a VIEW.) Part 2 postreview fixes.
| * WL#2787 (part 2, ver 3 (merged)) changed securety context switchingbell@sanja.is.com.ua2005-09-151-1/+2
| |
* | mergetulin@dl145c.mysql.com2005-09-141-1/+1
|\ \ | |/
| * part 1 (ver 2, postreview fix) of WL#2787bell@sanja.is.com.ua2005-09-141-1/+1
| | | | | | | | | | view definer information syntax/storage/replication fixed SOURCE field of .frm
* | Merge neptunus.(none):/home/msvensson/mysql/mysql-5.0msvensson@neptunus.(none)2005-09-021-4/+4
|\ \ | |/ | | | | into neptunus.(none):/home/msvensson/mysql/mysql-5.1
| * Merge mysql.com:/home/dlenev/src/mysql-4.1-bg12423dlenev@mysql.com2005-09-011-4/+4
| |\ | | | | | | | | | into mysql.com:/home/dlenev/src/mysql-5.0-merges
| | * Fix for bug #12423 "Deadlock when doing FLUSH PRIVILEGES and GRANT in dlenev@mysql.com2005-09-011-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | multi-threaded environment". To avoid deadlocks between several simultaneously run account management commands (particularly between FLUSH PRIVILEGES/SET PASSWORD and GRANT commands) we should always take table and internal locks during their execution in the same order. In other words we should first open and lock privilege tables and only then obtain acl_cache::lock/LOCK_grant locks.
* | | Mergetomas@poseidon.ndb.mysql.com2005-07-121-2/+9
|\ \ \ | |/ /
| * | added processing of view grants to table grants (BUG#9795)bell@sanja.is.com.ua2005-07-051-2/+9
| | |
* | | Merge tulin@bk-internal.mysql.com:/home/bk/mysql-5.0tulin@dl145c.mysql.com2005-05-171-8/+11
|\ \ \ | |/ / | | | | | | into dl145c.mysql.com:/home/ndbdev/tomas/mysql-5.1
| * | Bug#10246 - Parser: bad syntax for GRANT EXECUTEacurtis@xiphis.org2005-05-171-8/+11
| | | | | | | | | | | | | | | | | | Rename some functions more fine-grained sp privileges make grant/revoke sp grammar less ambigious
* | | 5.0 to 5.1 mergepatg@patrick.local2005-04-011-21/+18
|\ \ \ | |/ /
| * | sql_acl.cc, sql_acl.h, sql_parse.ccmysqldev@mysql.com2005-03-221-19/+18
| | | | | | | | | | | | | | | | | | | | | | | | New privilege CREATE USER (CREATE_USER_ACL, Create_user_priv) added grant2.test: new tests (mostly backported from jani's patch) system_mysql_db.result, sp.result, grant2.result, grant.result: results updated
* | | WL#2472: Fixes according to reviewlars@mysql.com2005-03-221-1/+0
| | |
* | | Mergelars@mysql.com2005-03-211-0/+3
|\ \ \
| * | | WL#2472: lars@mysql.com2005-03-211-1/+1
| | | | | | | | | | | | | | | | | | | | Renamed Table_filter to Rpl_filter Eliminated very annoying memory leak
| * | | WL#2472: Addendum: Fixes after Mats reviewlars@mysql.com2005-03-101-0/+3
| | | |
* | | | Merge mysql.com:/home/bk/mysql-5.0 into mysql.com:/home/bk/mysql-5.1lars@mysql.com2005-03-211-0/+2
|\ \ \ \
| * | | | Added more tests to grant2. Fixed some previous tests.jani@a193-229-222-105.elisa-laajakaista.fi2005-03-181-0/+2
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added new logic to ACL system: 1) If GRANT OPTION (not mysql db): Ok to update existing user, but not password. Not allowed to make a new user. 2) If UPDATE_ACL to mysql DB: Ok to update current user, but not make a new one. 3) If INSERT_ACL to mysql DB: Ok to add a new user, but not modify existing. 4) If GRANT OPTION to mysql DB: All modifications OK.
* | | | Merge tulin@bk-internal.mysql.com:/home/bk/mysql-5.0tomas@poseidon.ndb.mysql.com2005-03-171-1/+1
|\ \ \ \ | |/ / / | | | | | | | | into poseidon.ndb.mysql.com:/home/tomas/mysql-5.1
| * | | Code cleanups during review of pushed codemonty@mysql.com2005-03-151-1/+1
| | | |
* | | | Mergetomas@poseidon.ndb.mysql.com2005-03-081-1/+0
|\ \ \ \ | |/ / / |/| / / | |/ /
| * | Merge for 5.0 to 5.1brian@zim.(none)2005-01-061-1/+0
| |\ \
| | * | basic reservations for VIEWs prevelegesbell@sanja.is.com.ua2004-03-031-6/+16
| | | |
* | | | WL2131: Access control for SHOW ... PROCEDURE|FUNCTION ...gluh@gluh.mysql.r18.ru2005-03-051-0/+4
| | | |
* | | | mergedserg@serg.mylan2005-01-241-1/+1
|\ \ \ \ | |/ / / |/| | / | | |/ | |/|
| * | fixes/cleanups according to Coverity reportserg@serg.mylan2005-01-241-1/+1
| | |