File: keyring_keys_privileges.test

package info (click to toggle)
mysql-8.0 8.0.43-3
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 1,273,924 kB
  • sloc: cpp: 4,684,605; ansic: 412,450; pascal: 108,398; java: 83,641; perl: 30,221; cs: 27,067; sql: 26,594; sh: 24,181; python: 21,816; yacc: 17,169; php: 11,522; xml: 7,388; javascript: 7,076; makefile: 2,194; lex: 1,075; awk: 670; asm: 520; objc: 183; ruby: 97; lisp: 86
file content (40 lines) | stat: -rw-r--r-- 1,462 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
###########################################################################
# Test Author   : Mohit Joshi                                             #
# Creation Date : 30-Nov-2018                                             #
# WL#11543      : Instrument the keyring into performance schema          #
# Test Objective: To verify that only users with permissions to query the #
# performance schema can access the keyring_keys table.                   #
###########################################################################

CREATE USER happygilmore@localhost identified by 'happy';
GRANT SELECT ON *.* TO happygilmore@localhost;

--connect (con1,localhost,happygilmore,happy,test)
--connection con1
SHOW GRANTS;
SELECT * FROM performance_schema.keyring_keys;

--connection default
REVOKE SELECT ON *.* FROM happygilmore@localhost;
--disconnect con1

--connect (con1,localhost,happygilmore,happy,test)
--connection con1
SHOW GRANTS;
# Due to no SELECT privilege on the user, SELECT operation MUST fail.
--error ER_TABLEACCESS_DENIED_ERROR
SELECT * FROM performance_schema.keyring_keys;

--connection default
GRANT SELECT ON *.* TO happygilmore@localhost;
--disconnect con1

--connect (con1,localhost,happygilmore,happy,test)
--connection con1
SHOW GRANTS;
# Query must execute successfully after giving SELECT privilege to the user.
SELECT * FROM performance_schema.keyring_keys;

--connection default
DROP USER happygilmore@localhost;
--disconnect con1