Commit Graph

205 Commits

Author SHA1 Message Date
b52a38981c *: change SHOW CONFIG to require CONFIG privilege (#25379) 2021-06-15 16:56:36 +08:00
b51a9ca71c *: fix sem dynamic privilege permission issues (#25316) 2021-06-15 12:28:37 +08:00
faf139eae1 executor: Fix losing the auth string on changing SSL/TLS requirements (#25268) 2021-06-10 23:22:29 +08:00
9de1753866 *: fix permissions of brie RESTORE to be RESTORE_ADMIN (#25039) 2021-06-08 10:44:28 +08:00
7f4f5c0236 *: Change dynamic privileges to non-experimental (#24914) 2021-05-28 23:29:36 +08:00
c287bcb48c executor: Add plugin column to mysql.user (#24894) 2021-05-28 16:33:36 +08:00
4000975ad1 privileges: improve dynamic privs registration and tests (#24773) 2021-05-20 22:56:21 +08:00
15dfd7bdd3 *: Implementing RENAME USER (#24413) 2021-05-20 00:09:41 +08:00
8ad868f801 *: Add security enhanced mode part 3 (#24412) 2021-05-17 12:45:38 +08:00
f2cb145af2 planner, privilege: Add security enhanced mode part 4 (#24416) 2021-05-17 11:25:39 +08:00
d9f28c7f76 executor, privileges: Add dynamic privileges to SHOW PRIVILEGES (#24646) 2021-05-14 16:07:39 +08:00
e40f8c0881 *: fix revoke statement for CURRENT_USER() and refine error message (#24052)
* *: fix revoke statement for CURRENT_USER() and refine error message
2021-05-12 16:40:58 +08:00
b8cad01bef privilege: fix RequestVerificationWithUser use of default roles (#24442) 2021-05-10 22:08:42 +08:00
c5ca2ea7f9 *: add security enhanced mode part 2 (#24279) 2021-04-30 00:31:57 +08:00
4072172c05 *: add security enhanced mode part 1 (#23978) 2021-04-15 09:51:51 +08:00
2f877e8030 planner,privilege: requires extra privileges for REPLACE and INSERT ON DUPLICATE statements (#23911) 2021-04-10 00:18:33 +08:00
503841f5cd planner, privileges: do not require SELECT for unqualified DELETE (#23647) 2021-04-02 07:35:24 +08:00
90d02b2eed *: add support for dynamic privileges (#22778) 2021-04-01 00:17:24 +08:00
2a909bf2f1 Privileges: fix delete privilege check wrongly (#22971) 2021-03-09 19:26:55 +08:00
24b267d740 plugin, privilege: fix err check (#22998) 2021-03-03 21:32:54 +08:00
17eca20f18 executor, privilege: fix failure on grant USAGE privilege operation (#22748) 2021-03-02 22:30:54 +08:00
26086b297c privilege: remove any string concat (#22523) 2021-02-03 13:11:28 +08:00
34b4e9a033 planner, privilege: check for table not exists (#21776) 2020-12-23 17:40:37 +08:00
28c9e9290b *: gocritic fixes for commentFormatting (#21578) 2020-12-09 12:03:17 +08:00
42590965ed *: refactor CompilePattern and DoMatch used by like (#20610) 2020-11-04 13:25:52 +08:00
2f067c0542 *: redact arguments for Error (#20436) 2020-10-21 14:44:08 +08:00
449587a085 *: using standard error to replace terror (#19425) 2020-09-08 20:15:51 +08:00
3d33bdf49f privilege: fix wrong result of SHOW GRANTS (#19704)
* fix show grants user filter

* address comment

* address comment

Co-authored-by: ti-srebot <66930949+ti-srebot@users.noreply.github.com>
2020-09-07 14:45:20 +08:00
5d7c8ebeaa privilege: forbidden creating table in metrics_schema and performance_schema (#19705)
Signed-off-by: wjhuang2016 <huangwenjun1997@gmail.com>
2020-09-04 12:54:21 +08:00
6cba2702c0 session: fix mysql_list_fields leaking table info (#19554)
Co-authored-by: ti-srebot <66930949+ti-srebot@users.noreply.github.com>
2020-08-29 11:30:21 +08:00
6fdd609c00 privilege: fix user change after show grants and add user existed check for show grants (#19568)
* fix show grant change user object and add check

* fix lint

Co-authored-by: ti-srebot <66930949+ti-srebot@users.noreply.github.com>
2020-08-28 20:54:21 +08:00
baf09916b9 planner: privilege check for SELECT INTO OUTFILE (#19553)
Co-authored-by: ti-srebot <66930949+ti-srebot@users.noreply.github.com>
2020-08-28 16:43:03 +08:00
8c8a96773e privilege: fix show grants for column privilege (#19030)
Co-authored-by: ti-srebot <66930949+ti-srebot@users.noreply.github.com>
2020-08-10 17:27:17 +08:00
5f59f01625 *: fix error message of access denied (#17449)
Co-authored-by: tiancaiamao <tiancaiamao@gmail.com>
2020-06-05 19:51:54 +08:00
9e16c59ef0 privileges: support require SAN (#17539) 2020-06-05 11:24:43 +08:00
ac30f5322e mockstore: introducing embedded unistore (#17156) 2020-05-18 17:28:44 +08:00
468b8c6f7b executor, privilege: introduce a new privilege for the set config statement (#16847) 2020-04-27 14:17:38 +08:00
82bb3ced74 makefile: let make fmt ensure std imports before non-std (#16816) 2020-04-26 10:37:24 +08:00
26ba532e9d plan, privilege:fix load data privilege check (#16607) 2020-04-23 00:05:36 +08:00
b1d11a7091 *: rename statement summary tables (#16188) 2020-04-15 15:30:32 +08:00
c561d5aa99 *: remove useless conversions and omit some types (#16262) 2020-04-10 00:23:06 +08:00
d60567f765 privilege: fix select current_role() error (#15534) 2020-03-23 13:37:34 +08:00
55532d99e2 Moved connection-time SSL errors from Debug to Info log level (#15308) 2020-03-13 10:10:02 +08:00
9f0736ee8b errno: move the error code from the parser/mysql to tidb/errno (#15277) 2020-03-11 15:40:21 +08:00
9df0780764 privilege: add DDL and DML privilege check for system tables (#15095) 2020-03-04 14:57:47 +08:00
8431c10258 privilege: fix compatibility of DBIsVisible (#14862) 2020-02-25 21:25:36 +08:00
344c48d3b4 *: change field name 'password' to 'authentication_string' in mysql.user (#14598) 2020-02-19 11:58:42 +08:00
fa04a3218d *: add privilege check for slow_query and cluster memory table (#14451) 2020-02-12 18:28:44 +08:00
465af00b46 *: use new registrable terror (#14606) 2020-02-06 16:40:26 +08:00
e4eb58c86d executor: grant table level privilege should check table exist (#14540) 2020-01-30 11:57:23 +08:00