1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136
|
###############################################################################
# Bug#20049894: AUTOMATIC_SP_PRIVILEGES ARE NOT CORRECTLY REPLICATED WHEN
# SETTING DEFINER
#
# Problem:
# ========
# Privileges created by automatic_sp_privileges are not correctly replicated
# when the procedure is created by a super user using DEFINER.
#
# Test:
# =====
# Have a privileged user who already has EXECUTE and ALTER ROUTINE privileges
# and execute CREATE PROCEDURE command with and without DEFINER class.
# mysq.procs_priv table should not be updated. Take a non privileged user and
# execute CREATE PROCEDURE command with and without DEFINER class.
# mysql.procs_priv table should be updated.
###############################################################################
--source include/set_privilege_checks_user_as_system_user.inc
--let $rpl_privilege_checks_user_grant_option = 1
--source include/master-slave.inc
--source include/rpl_connection_master.inc
CREATE TABLE t1 (f INT NOT NULL PRIMARY KEY);
INSERT INTO t1 VALUES (10);
INSERT INTO t1 VALUES (20);
--source include/sync_slave_sql_with_master.inc
# Case 1: Privileged user root creating procedure with
# Definer. Procs_priv table should be empty
--source include/rpl_connection_master.inc
CREATE USER 'testuser'@'localhost';
GRANT CREATE ROUTINE ON test.* TO 'testuser'@'localhost';
GRANT REPLICATION CLIENT ON *.* TO 'testuser'@'localhost';
FLUSH PRIVILEGES;
DELIMITER |;
CREATE DEFINER='testuser'@'localhost' PROCEDURE row_cnt()
BEGIN
SELECT COUNT(*) as total_rows FROM test.t1;
END|
DELIMITER ;|
--source include/sync_slave_sql_with_master.inc
--source include/rpl_connection_master.inc
--let $assert_text= Assert that mysql.procs_priv table is empty
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv] = 0
--source include/assert.inc
--source include/rpl_connection_slave.inc
--let $assert_text= Assert that mysql.procs_priv table is empty
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv] = 0
--source include/assert.inc
--source include/rpl_connection_master.inc
DROP PROCEDURE row_cnt;
--source include/sync_slave_sql_with_master.inc
# Case 2: Privileged user root creating procedure without
# Definer. Procs_priv table should be empty
--source include/rpl_connection_master.inc
DELIMITER |;
CREATE PROCEDURE row_cnt()
BEGIN
SELECT COUNT(*) as total_rows FROM test.t1;
END|
DELIMITER ;|
--source include/sync_slave_sql_with_master.inc
--source include/rpl_connection_master.inc
--let $assert_text= Assert that mysql.procs_priv table is empty
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv] = 0
--source include/assert.inc
--source include/rpl_connection_slave.inc
--let $assert_text= Assert that mysql.procs_priv table is empty
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv] = 0
--source include/assert.inc
--source include/rpl_connection_master.inc
DROP PROCEDURE row_cnt;
--source include/sync_slave_sql_with_master.inc
# Case 3: Non Privileged user testuser creating procedure with
# Definer. Procs_priv table should be updated
--connect(con1,localhost,testuser,,)
--connection con1
DELIMITER |;
CREATE DEFINER='testuser'@'localhost' PROCEDURE row_cnt()
BEGIN
SELECT COUNT(*) as total_rows FROM test.t1;
END|
DELIMITER ;|
--source include/sync_slave_sql_with_master.inc
--source include/rpl_connection_master.inc
--let $assert_text= Assert that mysql.procs_priv table has one row for testuser
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv WHERE User="testuser"] = 1
--source include/assert.inc
--source include/rpl_connection_slave.inc
--let $assert_text= Assert that mysql.procs_priv table has one row for testuser
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv WHERE User="testuser"] = 1
--source include/assert.inc
--connection con1
DROP PROCEDURE row_cnt;
--source include/sync_slave_sql_with_master.inc
# Case 4: Non Privileged user testuser creating procedure with
# Definer. Procs_priv table should be updated
--connection con1
DELIMITER |;
CREATE PROCEDURE row_cnt()
BEGIN
SELECT COUNT(*) as total_rows FROM test.t1;
END|
DELIMITER ;|
--source include/sync_slave_sql_with_master.inc
--source include/rpl_connection_master.inc
--let $assert_text= Assert that mysql.procs_priv table has one row for testuser
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv WHERE User="testuser"] = 1
--source include/assert.inc
--source include/rpl_connection_slave.inc
--let $assert_text= Assert that mysql.procs_priv table has one row for testuser
--let $assert_cond= [SELECT COUNT(*) FROM mysql.procs_priv WHERE User="testuser"] = 1
--source include/assert.inc
# Cleanup
--source include/rpl_connection_master.inc
DROP TABLE t1;
DROP PROCEDURE row_cnt;
DROP USER 'testuser'@'localhost';
--source include/rpl_end.inc
|