Commit 530659e8 authored by unknown's avatar unknown

A fix for privilege checking bug.


sql/sql_parse.cc:
  Fix for a privilege bug in multi-table updates.
  Seems like better fix then chec_table_access.
parent 20bb527b
...@@ -1840,8 +1840,14 @@ mysql_execute_command(void) ...@@ -1840,8 +1840,14 @@ mysql_execute_command(void)
break; break;
} }
case SQLCOM_UPDATE: case SQLCOM_UPDATE:
if (check_access(thd,UPDATE_ACL,tables->db,&tables->grant.privilege)) TABLE_LIST *table;
if (check_db_used(thd,tables))
goto error; goto error;
for (table=tables ; table ; table=table->next)
{
if (check_access(thd,UPDATE_ACL,table->db,&table->grant.privilege))
goto error;
}
if (grant_option && check_grant(thd,UPDATE_ACL,tables)) if (grant_option && check_grant(thd,UPDATE_ACL,tables))
goto error; goto error;
if (select_lex->item_list.elements != lex->value_list.elements) if (select_lex->item_list.elements != lex->value_list.elements)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment