Show_db_priv ignored

Show_db_priv ignored

am 13.05.2004 12:31:12 von Wouter de Jong

Hello,

We have MySQL 4.0.18 (Linux, source-compiled) running on
some servers, and for some reason it ignores the Show_db_priv

--------------+------------------+--------------+----------- ------+------------------+----------+------------+---------- ---+--------------+---------------+-------------+----------- ------+
| Host | User | password | Select_priv | Insert_priv | Update_priv | Delete_priv | Create_priv | Drop_priv | Reload_priv | Shutdown_priv | Process_priv | File_priv | Grant_priv | References_priv | Index_priv | Alter_priv | Show_db_priv | Super_priv | Create_tmp_table_priv | Lock_tables_priv | Execute_priv | Repl_slave_priv | Repl_client_priv | ssl_type | ssl_cipher | x509_issuer | x509_subject | max_questions | max_updates | max_connections |
+-----------------+----------+------------------+----------- --+-------------+-------------+-------------+-------------+- ----------+-------------+---------------+--------------+---- -------+------------+-----------------+------------+-------- ----+--------------+------------+-----------------------+--- ---------------+--------------+-----------------+----------- -------+----------+------------+-------------+-------------- +---------------+-------------+-----------------+
| 212.204.254.% | almetaal | 60a1476777a54240 | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | Y | Y | N | N | N | | | | | 0 | 0 | 0 |

As you can see, Show_db_priv is 'N', but I can still view _ALL_ databases:

mysql> \s
--------------
mysql Ver 12.22 Distrib 4.0.18, for pc-linux (i686)

Connection id: 46729
Current database: almetaal1
Current user: almetaal@212.204.254.2
SSL: Not in use
Current pager: stdout
Using outfile: ''
Server version: 4.0.18 - WideXS
Protocol version: 10
Connection: db.widexs.nl via TCP/IP
Client characterset: latin1
Server characterset: latin1
TCP port: 3306
Uptime: 25 min 53 sec

Threads: 22 Questions: 574857 Slow queries: 0 Opens: 9864 Flush tables: 3 Open tables: 512 Queries per second avg: 370.159
--------------

mysql> SHOW DATABASES;
+---------------+
| Database |
+---------------+
| 7parts |
| Jokes |
| NovaRage |
| PaardenDB |
| a |
| actualiteiten |
| adiso |
| aedifex |
| ahh |
| airtoi |
| ajaxtimpan |
| alblas |
| alfaleo |


--
WideXS http://www.widexs.nl
Wouter de Jong System-Administrator
Tel +31 (0)23 5698070 Fax +31 (0)23 5698099
Bijlmermeerstraat 62, 2131 HG HOOFDDORP, NL

--
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe: http://lists.mysql.com/bugs?unsub=gcdmb-bugs@m.gmane.org

Re: Show_db_priv ignored

am 13.05.2004 13:05:56 von Sergei Golubchik

Hi!

On May 13, Wouter de Jong wrote:
> Hello,
>
> We have MySQL 4.0.18 (Linux, source-compiled) running on
> some servers, and for some reason it ignores the Show_db_priv
>
> --------------+------------------+--------------+----------- ------+------------------+----------+------------+---------- ---+--------------+---------------+-------------+----------- ------+
> | Host | User | password | Select_priv | Insert_priv | Update_priv | Delete_priv | Create_priv | Drop_priv | Reload_priv | Shutdown_priv | Process_priv | File_priv | Grant_priv | References_priv | Index_priv | Alter_priv | Show_db_priv | Super_priv | Create_tmp_table_priv | Lock_tables_priv | Execute_priv | Repl_slave_priv | Repl_client_priv | ssl_type | ssl_cipher | x509_issuer | x509_subject | max_questions | max_updates | max_connections |
> +-----------------+----------+------------------+----------- --+-------------+-------------+-------------+-------------+- ----------+-------------+---------------+--------------+---- -------+------------+-----------------+------------+-------- ----+--------------+------------+-----------------------+--- ---------------+--------------+-----------------+----------- -------+----------+------------+-------------+-------------- +---------------+-------------+-----------------+
> | 212.204.254.% | almetaal | 60a1476777a54240 | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | Y | Y | N | N | N | | | | | 0 | 0 | 0 |
>
> As you can see, Show_db_priv is 'N', but I can still view _ALL_ databases:

Show_db_priv allows to see databases you have NO privileges for.
If you have some privileges for some database you will be able to see it
independent on Show_db_priv. And above you have global
Create_tmp_table_priv and Lock_tables_priv - that is you have these
privileges in ALL databases, thus you see all databases.

Regards,
Sergei

--
__ ___ ___ ____ __
/ |/ /_ __/ __/ __ \/ / Sergei Golubchik
/ /|_/ / // /\ \/ /_/ / /__ MySQL AB, Senior Software Developer
/_/ /_/\_, /___/\___\_\___/ Osnabrueck, Germany
<___/ www.mysql.com

--
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe: http://lists.mysql.com/bugs?unsub=gcdmb-bugs@m.gmane.org

Re: Show_db_priv ignored

am 13.05.2004 13:52:15 von Wouter de Jong

On Thu, May 13, 2004 at 01:05:56PM +0200, Sergei Golubchik wrote:
> Hi!
>
> Show_db_priv allows to see databases you have NO privileges for.
> If you have some privileges for some database you will be able to see it
> independent on Show_db_priv. And above you have global
> Create_tmp_table_priv and Lock_tables_priv - that is you have these
> privileges in ALL databases, thus you see all databases.

Thanks! This was a bit mysterious in the documentation I found.

> Regards,
> Sergei

--
WideXS http://www.widexs.nl
Wouter de Jong System-Administrator
Tel +31 (0)23 5698070 Fax +31 (0)23 5698099
Bijlmermeerstraat 62, 2131 HG HOOFDDORP, NL

--
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe: http://lists.mysql.com/bugs?unsub=gcdmb-bugs@m.gmane.org

Re: Show_db_priv ignored

am 13.05.2004 14:25:48 von Sinisa Milivojevic

Wouter de Jong writes:
> Hello,
>
> We have MySQL 4.0.18 (Linux, source-compiled) running on
> some servers, and for some reason it ignores the Show_db_priv
>

[skip]

>
> --
> WideXS http://www.widexs.nl
> Wouter de Jong System-Administrator
> Tel +31 (0)23 5698070 Fax +31 (0)23 5698099
> Bijlmermeerstraat 62, 2131 HG HOOFDDORP, NL
>

Hi!

Thank you for writting to us.

We are aware of the above behaviour and have recently started to
document it.

SHOW_DB privilege will work only if you start server with
--skip-show-database.

--

Sincerely,

--
For technical support contracts, go to https://order.mysql.com/?ref=msmi
__ ___ ___ ____ __
/ |/ /_ __/ __/ __ \/ / Mr. Sinisa Milivojevic
/ /|_/ / // /\ \/ /_/ / /__ MySQL AB
/_/ /_/\_, /___/\___\_\___/ Full time Developer and Support Coordinator
<___/ www.mysql.com Larnaca, Cyprus



--
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe: http://lists.mysql.com/bugs?unsub=gcdmb-bugs@m.gmane.org

Re: Show_db_priv ignored

am 13.05.2004 15:39:23 von Paul DuBois

At 13:52 +0200 5/13/04, Wouter de Jong wrote:
>On Thu, May 13, 2004 at 01:05:56PM +0200, Sergei Golubchik wrote:
>> Hi!
>>
>> Show_db_priv allows to see databases you have NO privileges for.
>> If you have some privileges for some database you will be able to see it
>> independent on Show_db_priv. And above you have global
>> Create_tmp_table_priv and Lock_tables_priv - that is you have these
>> privileges in ALL databases, thus you see all databases.
>
>Thanks! This was a bit mysterious in the documentation I found.

Which documentation, specifically? I recently revised the description
for this privilege in hopes of clarifying it, but perhaps I was not
successful.


>
>> Regards,
>> Sergei
>
>--
>WideXS http://www.widexs.nl
>Wouter de Jong System-Administrator
>Tel +31 (0)23 5698070 Fax +31 (0)23 5698099
>Bijlmermeerstraat 62, 2131 HG HOOFDDORP, NL


--
Paul DuBois, MySQL Documentation Team
Madison, Wisconsin, USA
MySQL AB, www.mysql.com

--
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe: http://lists.mysql.com/bugs?unsub=gcdmb-bugs@m.gmane.org