MySQL 8.4.3
Source Code Documentation
auth_common.h
Go to the documentation of this file.
1/* Copyright (c) 2000, 2024, Oracle and/or its affiliates.
2
3 This program is free software; you can redistribute it and/or modify
4 it under the terms of the GNU General Public License, version 2.0,
5 as published by the Free Software Foundation.
6
7 This program is designed to work with certain software (including
8 but not limited to OpenSSL) that is licensed under separate terms,
9 as designated in a particular file or component or in included license
10 documentation. The authors of MySQL hereby grant you an additional
11 permission to link the program and your derivative works with the
12 separately licensed software that they have either included with
13 the program or referenced in the documentation.
14
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License, version 2.0, for more details.
19
20 You should have received a copy of the GNU General Public License
21 along with this program; if not, write to the Free Software
22 Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */
23
24#ifndef AUTH_COMMON_INCLUDED
25#define AUTH_COMMON_INCLUDED
26
27#include <assert.h>
28#include <stddef.h>
29#include <stdint.h>
30#include <sys/types.h>
31#include <functional>
32#include <list>
33#include <memory>
34#include <string>
35#include <utility>
36#include <vector>
37
38#include "lex_string.h"
39#include "my_command.h"
40
41#include "my_hostname.h" // HOSTNAME_LENGTH
42#include "my_inttypes.h"
43#include "mysql_com.h" // USERNAME_LENGTH
44#include "sql/auth/auth_acls.h" // Access_bitmask
45#include "template_utils.h"
46
47#include <openssl/rsa.h>
48
49/* Forward Declarations */
50class Alter_info;
52class Item;
53class LEX_COLUMN;
54class String;
55class THD;
56struct CHARSET_INFO;
57struct GRANT_INFO;
59struct HA_CREATE_INFO;
60struct LEX_USER;
61template <class T>
62class List;
63typedef struct user_conn USER_CONN;
65class ACL_USER;
66struct TABLE;
67struct MEM_ROOT;
68class Table_ref;
69enum class role_enum;
70enum class Consumer_type;
71class LEX_GRANT_AS;
72
73namespace consts {
74extern const std::string mysql;
75extern const std::string system_user;
76extern const std::string connection_admin;
77} // namespace consts
78
79/** user, host tuple which reference either acl_cache or g_default_roles */
80typedef std::pair<LEX_CSTRING, LEX_CSTRING> Auth_id_ref;
81typedef std::vector<Auth_id_ref> List_of_auth_id_refs;
82
83bool operator<(const Auth_id_ref &a, const Auth_id_ref &b);
84
86 /**
87 Access granted for all the requested privileges,
88 do not use the grant tables.
89 This flag is used only for the INFORMATION_SCHEMA privileges,
90 for compatibility reasons.
91 */
93 /** Access denied, do not use the grant tables. */
95 /** No decision yet, use the grant tables. */
97};
98
99/* Classes */
100
101/**
102 Per internal table ACL access rules.
103 This class is an interface.
104 Per table(s) specific access rule should be implemented in a subclass.
105 @sa ACL_internal_schema_access
106*/
108 public:
110
111 virtual ~ACL_internal_table_access() = default;
112
113 /**
114 Check access to an internal table.
115 When a privilege is granted, this method add the requested privilege
116 to save_priv.
117 @param want_access the privileges requested
118 @param [in, out] save_priv the privileges granted
119 @param any_combination_will_do true if it's enough to have any privilege
120 for any combination of the table columns.
121 @retval ACL_INTERNAL_ACCESS_GRANTED All the requested privileges
122 are granted, and saved in save_priv.
123 @retval ACL_INTERNAL_ACCESS_DENIED At least one of the requested
124 privileges was denied.
125 @retval ACL_INTERNAL_ACCESS_CHECK_GRANT No requested privilege
126 was denied, and grant should be checked for at least one
127 privilege. Requested privileges that are granted, if any, are saved
128 in save_priv.
129 */
131 Access_bitmask want_access, Access_bitmask *save_priv,
132 bool any_combination_will_do) const = 0;
133};
134
135/**
136 Per internal schema ACL access rules.
137 This class is an interface.
138 Each per schema specific access rule should be implemented
139 in a different subclass, and registered.
140 Per schema access rules can control:
141 - every schema privileges on schema.*
142 - every table privileges on schema.table
143 @sa ACL_internal_schema_registry
144*/
146 public:
148
149 virtual ~ACL_internal_schema_access() = default;
150
151 /**
152 Check access to an internal schema.
153 @param want_access the privileges requested
154 @param [in, out] save_priv the privileges granted
155 @param any_combination_will_do true if it's enough to have any privilege
156 for any combination of the table columns.
157 @retval ACL_INTERNAL_ACCESS_GRANTED All the requested privileges
158 are granted, and saved in save_priv.
159 @retval ACL_INTERNAL_ACCESS_DENIED At least one of the requested
160 privileges was denied.
161 @retval ACL_INTERNAL_ACCESS_CHECK_GRANT No requested privilege
162 was denied, and grant should be checked for at least one
163 privilege. Requested privileges that are granted, if any, are saved
164 in save_priv.
165 */
167 Access_bitmask want_access, Access_bitmask *save_priv,
168 bool any_combination_will_do) const = 0;
169
170 /**
171 Search for per table ACL access rules by table name.
172 @param name the table name
173 @return per table access rules, or NULL
174 */
175 virtual const ACL_internal_table_access *lookup(const char *name) const = 0;
176};
177
178/**
179 A registry for per internal schema ACL.
180 An 'internal schema' is a database schema maintained by the
181 server implementation, such as 'performance_schema' and 'INFORMATION_SCHEMA'.
182*/
184 public:
185 static void register_schema(const LEX_CSTRING &name,
186 const ACL_internal_schema_access *access);
187 static const ACL_internal_schema_access *lookup(const char *name);
188};
189
190/**
191 Extension of ACL_internal_schema_access for Information Schema
192*/
194 public:
196
197 ~IS_internal_schema_access() override = default;
198
200 Access_bitmask *save_priv,
201 bool any_combination_will_do) const override;
202
203 const ACL_internal_table_access *lookup(const char *name) const override;
204};
205
206/* Data Structures */
207
208extern const std::vector<std::string> global_acls_vector;
209
235
290
301
313
324
336
345
353
361
369
370/* When we run mysql_upgrade we must make sure that the server can be run
371 using previous mysql.user table schema during acl_load.
372
373 User_table_schema is a common interface for the current and the
374 previous mysql.user table schema.
375 */
377 public:
378 virtual uint host_idx() = 0;
379 virtual uint user_idx() = 0;
380 virtual uint password_idx() = 0;
381 virtual uint select_priv_idx() = 0;
382 virtual uint insert_priv_idx() = 0;
383 virtual uint update_priv_idx() = 0;
384 virtual uint delete_priv_idx() = 0;
385 virtual uint create_priv_idx() = 0;
386 virtual uint drop_priv_idx() = 0;
387 virtual uint reload_priv_idx() = 0;
388 virtual uint shutdown_priv_idx() = 0;
389 virtual uint process_priv_idx() = 0;
390 virtual uint file_priv_idx() = 0;
391 virtual uint grant_priv_idx() = 0;
392 virtual uint references_priv_idx() = 0;
393 virtual uint index_priv_idx() = 0;
394 virtual uint alter_priv_idx() = 0;
395 virtual uint show_db_priv_idx() = 0;
396 virtual uint super_priv_idx() = 0;
397 virtual uint create_tmp_table_priv_idx() = 0;
398 virtual uint lock_tables_priv_idx() = 0;
399 virtual uint execute_priv_idx() = 0;
400 virtual uint repl_slave_priv_idx() = 0;
401 virtual uint repl_client_priv_idx() = 0;
402 virtual uint create_view_priv_idx() = 0;
403 virtual uint show_view_priv_idx() = 0;
404 virtual uint create_routine_priv_idx() = 0;
405 virtual uint alter_routine_priv_idx() = 0;
406 virtual uint create_user_priv_idx() = 0;
407 virtual uint event_priv_idx() = 0;
408 virtual uint trigger_priv_idx() = 0;
409 virtual uint create_tablespace_priv_idx() = 0;
410 virtual uint create_role_priv_idx() = 0;
411 virtual uint drop_role_priv_idx() = 0;
412 virtual uint ssl_type_idx() = 0;
413 virtual uint ssl_cipher_idx() = 0;
414 virtual uint x509_issuer_idx() = 0;
415 virtual uint x509_subject_idx() = 0;
416 virtual uint max_questions_idx() = 0;
417 virtual uint max_updates_idx() = 0;
418 virtual uint max_connections_idx() = 0;
419 virtual uint max_user_connections_idx() = 0;
420 virtual uint plugin_idx() = 0;
421 virtual uint authentication_string_idx() = 0;
422 virtual uint password_expired_idx() = 0;
423 virtual uint password_last_changed_idx() = 0;
424 virtual uint password_lifetime_idx() = 0;
425 virtual uint account_locked_idx() = 0;
426 virtual uint password_reuse_history_idx() = 0;
427 virtual uint password_reuse_time_idx() = 0;
428 // Added in 8.0.13
430 // Added in 8.0.14
431 virtual uint user_attributes_idx() = 0;
432
433 virtual ~User_table_schema() = default;
434};
435
436/*
437 This class describes indices for the current mysql.user table schema.
438 */
440 public:
441 uint host_idx() override { return MYSQL_USER_FIELD_HOST; }
442 uint user_idx() override { return MYSQL_USER_FIELD_USER; }
443 // not available
444 uint password_idx() override {
445 assert(0);
447 }
453 uint drop_priv_idx() override { return MYSQL_USER_FIELD_DROP_PRIV; }
457 uint file_priv_idx() override { return MYSQL_USER_FIELD_FILE_PRIV; }
458 uint grant_priv_idx() override { return MYSQL_USER_FIELD_GRANT_PRIV; }
459 uint references_priv_idx() override {
461 }
462 uint index_priv_idx() override { return MYSQL_USER_FIELD_INDEX_PRIV; }
463 uint alter_priv_idx() override { return MYSQL_USER_FIELD_ALTER_PRIV; }
465 uint super_priv_idx() override { return MYSQL_USER_FIELD_SUPER_PRIV; }
466 uint create_role_priv_idx() override {
468 }
472 }
473 uint lock_tables_priv_idx() override {
475 }
477 uint repl_slave_priv_idx() override {
479 }
480 uint repl_client_priv_idx() override {
482 }
483 uint create_view_priv_idx() override {
485 }
487 uint create_routine_priv_idx() override {
489 }
490 uint alter_routine_priv_idx() override {
492 }
493 uint create_user_priv_idx() override {
495 }
496 uint event_priv_idx() override { return MYSQL_USER_FIELD_EVENT_PRIV; }
500 }
501 uint ssl_type_idx() override { return MYSQL_USER_FIELD_SSL_TYPE; }
502 uint ssl_cipher_idx() override { return MYSQL_USER_FIELD_SSL_CIPHER; }
507 uint max_connections_idx() override {
509 }
510 uint max_user_connections_idx() override {
512 }
513 uint plugin_idx() override { return MYSQL_USER_FIELD_PLUGIN; }
516 }
517 uint password_expired_idx() override {
519 }
522 }
523 uint password_lifetime_idx() override {
525 }
529 }
530 uint password_reuse_time_idx() override {
532 }
535 }
536 uint user_attributes_idx() override {
538 }
539};
540
541/*
542 This class describes indices for the old mysql.user table schema.
543 */
545 public:
591 };
592
593 uint host_idx() override { return MYSQL_USER_FIELD_HOST_56; }
594 uint user_idx() override { return MYSQL_USER_FIELD_USER_56; }
595 uint password_idx() override { return MYSQL_USER_FIELD_PASSWORD_56; }
603 uint shutdown_priv_idx() override {
605 }
609 uint references_priv_idx() override {
611 }
618 }
619 uint lock_tables_priv_idx() override {
621 }
623 uint repl_slave_priv_idx() override {
625 }
626 uint repl_client_priv_idx() override {
628 }
629 uint create_view_priv_idx() override {
631 }
632 uint show_view_priv_idx() override {
634 }
635 uint create_routine_priv_idx() override {
637 }
638 uint alter_routine_priv_idx() override {
640 }
641 uint create_user_priv_idx() override {
643 }
648 }
649 uint ssl_type_idx() override { return MYSQL_USER_FIELD_SSL_TYPE_56; }
653 uint max_questions_idx() override {
655 }
657 uint max_connections_idx() override {
659 }
660 uint max_user_connections_idx() override {
662 }
663 uint plugin_idx() override { return MYSQL_USER_FIELD_PLUGIN_56; }
666 }
667 uint password_expired_idx() override {
669 }
670
671 // those fields are not available in 5.6 db schema
674 }
681 }
685 }
687};
688
690 public:
693 ? implicit_cast<User_table_schema *>(new User_table_old_schema())
694 : implicit_cast<User_table_schema *>(
696 }
697
698 virtual bool is_old_user_table_schema(TABLE *table);
699 virtual ~User_table_schema_factory() = default;
700};
701
704extern const char *any_db; // Special symbol for check_access
705/** controls the extra checks on plugin availability for mysql.user records */
706
707extern bool validate_user_plugins;
708
709/* Function Declarations */
710
711/* sql_authentication */
712void acl_log_connect(const char *user, const char *host, const char *auth_as,
713 const char *db, THD *thd,
716bool acl_check_host(THD *thd, const char *host, const char *ip);
717
718/*
719 User Attributes are the once which are defined during CREATE/ALTER/GRANT
720 statement. These attributes are divided into following categories.
721*/
722
723#define NONE_ATTR 0L
724#define DEFAULT_AUTH_ATTR (1L << 0) /* update defaults auth */
725#define PLUGIN_ATTR (1L << 1) /* update plugin */
726 /* authentication_string */
727#define SSL_ATTR (1L << 2) /* ex: SUBJECT,CIPHER.. */
728#define RESOURCE_ATTR (1L << 3) /* ex: MAX_QUERIES_PER_HOUR.. */
729#define PASSWORD_EXPIRE_ATTR (1L << 4) /* update password expire col */
730#define ACCESS_RIGHTS_ATTR (1L << 5) /* update privileges */
731#define ACCOUNT_LOCK_ATTR (1L << 6) /* update account lock status */
732#define DIFFERENT_PLUGIN_ATTR \
733 (1L << 7) /* updated plugin with a different value */
734#define USER_ATTRIBUTES (1L << 8) /* Request to update user attributes */
735
736/* sql_user */
737void log_user(THD *thd, String *str, LEX_USER *user, bool comma);
738bool check_change_password(THD *thd, const char *host, const char *user,
739 bool retain_current_password);
740bool change_password(THD *thd, LEX_USER *user, const char *password,
741 const char *current_password,
742 bool retain_current_password);
743bool mysql_create_user(THD *thd, List<LEX_USER> &list, bool if_not_exists,
744 bool is_role);
745bool mysql_alter_user(THD *thd, List<LEX_USER> &list, bool if_exists);
746bool mysql_drop_user(THD *thd, List<LEX_USER> &list, bool if_exists,
747 bool drop_role);
750
751/* sql_auth_cache */
752void init_acl_memory();
753int wild_case_compare(CHARSET_INFO *cs, const char *str, const char *wildstr);
754int wild_case_compare(CHARSET_INFO *cs, const char *str, size_t str_len,
755 const char *wildstr, size_t wildstr_len);
756bool hostname_requires_resolving(const char *hostname);
757bool acl_init(bool dont_read_acl_tables);
758bool is_acl_inited();
759void acl_free(bool end = false);
760bool check_engine_type_for_acl_table(THD *thd, bool mdl_locked);
762void grant_free(void);
763bool reload_acl_caches(THD *thd, bool mdl_locked);
764Access_bitmask acl_get(THD *thd, const char *host, const char *ip,
765 const char *user, const char *db, bool db_is_pattern);
766bool is_acl_user(THD *thd, const char *host, const char *user);
767bool acl_getroot(THD *thd, Security_context *sctx, const char *user,
768 const char *host, const char *ip, const char *db);
769bool check_acl_tables_intact(THD *thd, bool mdl_locked);
770bool check_acl_tables_intact(THD *thd, Table_ref *tables);
771void notify_flush_event(THD *thd);
773void append_auth_id_string(const THD *thd, const char *user, size_t user_len,
774 const char *host, size_t host_len, String *str);
775
776/* sql_authorization */
777bool skip_grant_tables();
779bool mysql_set_role_default(THD *thd);
780bool mysql_set_active_role_all(THD *thd, const List<LEX_USER> *except_users);
781bool mysql_set_active_role(THD *thd, const List<LEX_USER> *role_list);
782bool mysql_grant(THD *thd, const char *db, List<LEX_USER> &list,
783 Access_bitmask rights, bool revoke_grant, bool is_proxy,
784 const List<LEX_CSTRING> &dynamic_privilege,
785 bool grant_all_current_privileges, LEX_GRANT_AS *grant_as);
786bool mysql_routine_grant(THD *thd, Table_ref *table, bool is_proc,
787 List<LEX_USER> &user_list, Access_bitmask rights,
788 bool revoke, bool write_to_binlog,
789 bool all_current_privileges);
790int mysql_table_grant(THD *thd, Table_ref *table, List<LEX_USER> &user_list,
791 List<LEX_COLUMN> &column_list, Access_bitmask rights,
792 bool revoke, bool all_current_privileges);
793bool check_grant(THD *thd, Access_bitmask want_access, Table_ref *tables,
794 bool any_combination_will_do, uint number, bool no_errors);
795bool check_grant_column(THD *thd, GRANT_INFO *grant, const char *db_name,
796 const char *table_name, const char *name, size_t length,
797 Security_context *sctx, Access_bitmask want_privilege);
798bool check_column_grant_in_table_ref(THD *thd, Table_ref *table_ref,
799 const char *name, size_t length,
800 Access_bitmask want_privilege);
801bool check_grant_all_columns(THD *thd, Access_bitmask want_access,
803bool check_grant_routine(THD *thd, Access_bitmask want_access, Table_ref *procs,
804 bool is_proc, bool no_error);
805bool check_grant_db(THD *thd, const char *db,
806 const bool check_table_grant = false);
807bool acl_check_proxy_grant_access(THD *thd, const char *host, const char *user,
808 bool with_grant);
809void get_privilege_desc(char *to, uint max_length, Access_bitmask access);
810void get_mqh(THD *thd, const char *user, const char *host, USER_CONN *uc);
813 const char *db_name, const char *table_name,
814 const char *field_name);
815bool mysql_show_grants(THD *, LEX_USER *, const List_of_auth_id_refs &, bool,
816 bool);
817bool mysql_show_create_user(THD *thd, LEX_USER *user, bool are_both_users_same);
819bool sp_revoke_privileges(THD *thd, const char *sp_db, const char *sp_name,
820 bool is_proc);
821bool sp_grant_privileges(THD *thd, const char *sp_db, const char *sp_name,
822 bool is_proc);
824 const char *db, const char *table);
825int fill_schema_user_privileges(THD *thd, Table_ref *tables, Item *cond);
826int fill_schema_schema_privileges(THD *thd, Table_ref *tables, Item *cond);
827int fill_schema_table_privileges(THD *thd, Table_ref *tables, Item *cond);
828int fill_schema_column_privileges(THD *thd, Table_ref *tables, Item *cond);
830 GRANT_INTERNAL_INFO *grant_internal_info, const char *schema_name);
831
832bool lock_tables_precheck(THD *thd, Table_ref *tables);
833bool create_table_precheck(THD *thd, Table_ref *tables,
835bool check_fk_parent_table_access(THD *thd, HA_CREATE_INFO *create_info,
836 Alter_info *alter_info);
838 bool *fake_lock_tables_acl);
839bool check_readonly(THD *thd, bool err_if_readonly);
840void err_readonly(THD *thd);
841
843
844bool check_one_table_access(THD *thd, Access_bitmask privilege,
845 Table_ref *tables);
846bool check_single_table_access(THD *thd, Access_bitmask privilege,
847 Table_ref *tables, bool no_errors);
848bool check_routine_access(THD *thd, Access_bitmask want_access, const char *db,
849 char *name, bool is_proc, bool no_errors);
850bool check_some_access(THD *thd, Access_bitmask want_access, Table_ref *table);
851bool has_full_view_routine_access(THD *thd, const char *db,
852 const char *definer_user,
853 const char *definer_host);
854bool has_partial_view_routine_access(THD *thd, const char *db,
855 const char *routine_name, bool is_proc);
856bool check_access(THD *thd, Access_bitmask want_access, const char *db,
857 Access_bitmask *save_priv,
858 GRANT_INTERNAL_INFO *grant_internal_info,
859 bool dont_check_global_grants, bool no_errors);
860bool check_table_access(THD *thd, Access_bitmask requirements,
861 Table_ref *tables,
862 bool any_combination_of_privileges_will_do, uint number,
863 bool no_errors);
865bool mysql_grant_role(THD *thd, const List<LEX_USER> *users,
866 const List<LEX_USER> *roles, bool with_admin_opt);
867bool mysql_revoke_role(THD *thd, const List<LEX_USER> *users,
868 const List<LEX_USER> *roles);
870
871bool is_granted_table_access(THD *thd, Access_bitmask required_acl,
873
875 const List<LEX_USER> *users,
876 const List<LEX_USER> *roles);
877void roles_graphml(THD *thd, String *);
878bool has_grant_role_privilege(THD *thd, const List<LEX_USER> *roles);
880std::string create_authid_str_from(const LEX_USER *user);
881std::pair<std::string, std::string> get_authid_from_quoted_string(
882 std::string str);
883void append_identifier(String *packet, const char *name, size_t length);
884bool is_role_id(LEX_USER *authid);
885void shutdown_acl_cache();
887 LEX_CSTRING role_host);
888bool is_mandatory_role(LEX_CSTRING role, LEX_CSTRING role_host,
889 bool *is_mandatory);
890bool check_global_access(THD *thd, Access_bitmask want_access);
891
892/* sql_user_table */
894bool is_acl_table_name(const char *name);
895#ifndef NDEBUG
896bool is_acl_table(const TABLE *table);
897#endif
898
905
907extern bool opt_auto_generate_certs;
908bool do_auto_cert_generation(ssl_artifacts_status auto_detection_status,
909 const char **ssl_ca, const char **ssl_key,
910 const char **ssl_cert);
911
912#define DEFAULT_SSL_CA_CERT "ca.pem"
913#define DEFAULT_SSL_CA_KEY "ca-key.pem"
914#define DEFAULT_SSL_SERVER_CERT "server-cert.pem"
915#define DEFAULT_SSL_SERVER_KEY "server-key.pem"
916
917void update_mandatory_roles(void);
918bool check_authorization_id_string(THD *thd, LEX_STRING &mandatory_roles);
919void func_current_role(const THD *thd, String *active_role);
920
922
926 virtual ~Security_context_policy() = default;
929};
930
931typedef std::function<bool(Security_context *,
934
935template <class Derived>
937 public:
938 bool operator()(Security_context *sctx, Operation op) override {
939 if (op == Precheck && static_cast<Derived *>(this)->precheck(sctx))
940 return true;
941 if (op == Execute && static_cast<Derived *>(this)->create(sctx))
942 return true;
943 return false;
944 }
945};
946
947template <class Derived>
949 public:
950 bool operator()(Security_context *sctx, Operation op) override {
951 if (op == Precheck && static_cast<Derived *>(this)->precheck(sctx))
952 return true;
953 if (op == Execute && static_cast<Derived *>(this)->grant_privileges(sctx))
954 return true;
955 return false;
956 }
957};
958
959template <typename T>
960using Sctx_ptr = std::unique_ptr<T, std::function<void(T *)>>;
961
962/**
963 Factory for creating any Security_context given a pre-constructed policy.
964*/
966 public:
967 /**
968 Default Security_context factory implementation. Given two policies and
969 a authid this class returns a Security_context.
970 @param thd The thread handle
971 @param user User name associated with auth id
972 @param host Host name associated with auth id
973 @param extend_user_profile The policy for creating the user profile
974 @param priv The policy for authorizing the authid to
975 use the server.
976 @param static_priv Static privileges for authid.
977 @param drop_policy The policy for deleting the authid and
978 revoke privileges
979 */
980 Security_context_factory(THD *thd, std::string user, std::string host,
981 Security_context_functor extend_user_profile,
983 Security_context_functor static_priv,
984 std::function<void(Security_context *)> drop_policy)
985 : m_thd(thd),
986 m_user(std::move(user)),
987 m_host(std::move(host)),
988 m_user_profile(std::move(extend_user_profile)),
989 m_privileges(std::move(priv)),
990 m_static_privileges(std::move(static_priv)),
991 m_drop_policy(std::move(drop_policy)) {}
992
994
995 private:
997
999 std::string m_user;
1000 std::string m_host;
1004 const std::function<void(Security_context *)> m_drop_policy;
1005};
1006
1007class Default_local_authid : public Create_authid<Default_local_authid> {
1008 public:
1009 Default_local_authid(const THD *thd);
1010 bool precheck(Security_context *sctx);
1011 bool create(Security_context *sctx);
1012
1013 private:
1014 const THD *m_thd;
1015};
1016
1017/**
1018 Grant the privilege temporarily to the in-memory global privileges map.
1019 This class is not thread safe.
1020 */
1022 : public Grant_privileges<Grant_temporary_dynamic_privileges> {
1023 public:
1025 std::vector<std::string> privs);
1026 bool precheck(Security_context *sctx);
1028
1029 private:
1030 const THD *m_thd;
1031 const std::vector<std::string> m_privs;
1032};
1033
1035 public:
1036 explicit Drop_temporary_dynamic_privileges(std::vector<std::string> privs)
1037 : m_privs(std::move(privs)) {}
1038 void operator()(Security_context *sctx);
1039
1040 private:
1041 std::vector<std::string> m_privs;
1042};
1043
1045 : public Grant_privileges<Grant_temporary_static_privileges> {
1046 public:
1047 Grant_temporary_static_privileges(const THD *thd, const Access_bitmask privs);
1048 bool precheck(Security_context *sctx);
1050
1051 private:
1052 /** THD handle */
1053 const THD *m_thd;
1054
1055 /** Privileges */
1057};
1058
1059bool operator==(const LEX_CSTRING &a, const LEX_CSTRING &b);
1060bool is_partial_revoke_exists(THD *thd);
1061void set_system_user_flag(THD *thd, bool check_for_main_security_ctx = false);
1063 bool check_for_main_security_ctx = false);
1064
1065/**
1066 Storage container for default auth ids. Default roles are only weakly
1067 depending on ACL_USERs. You can retain a default role even if the
1068 corresponding ACL_USER is missing in the acl_cache.
1069*/
1070class Auth_id {
1071 public:
1073 Auth_id(const char *user, size_t user_len, const char *host, size_t host_len);
1074 Auth_id(const Auth_id_ref &id);
1075 Auth_id(const LEX_CSTRING &user, const LEX_CSTRING &host);
1076 Auth_id(const std::string &user, const std::string &host);
1077 Auth_id(const LEX_USER *lex_user);
1078 Auth_id(const ACL_USER *acl_user);
1079
1081 Auth_id(const Auth_id &id);
1082 Auth_id &operator=(const Auth_id &) = default;
1083
1084 bool operator<(const Auth_id &id) const;
1085 void auth_str(std::string *out) const;
1086 std::string auth_str() const;
1087 const std::string &user() const;
1088 const std::string &host() const;
1089
1090 private:
1091 void create_key();
1092 /** User part */
1093 std::string m_user;
1094 /** Host part */
1095 std::string m_host;
1096 /**
1097 Key: Internal representation mainly to facilitate use of
1098 Auth_id class in standard container.
1099 Format: 'user\0host\0'
1100 */
1101 std::string m_key;
1102};
1103
1104/*
1105 As of now Role_id is an alias of Auth_id.
1106 We may extend the Auth_id as Role_id once
1107 more substances are added to latter.
1108*/
1110
1111/**
1112 Length of string buffer, that is enough to contain
1113 username and hostname parts of the user identifier with trailing zero in
1114 MySQL standard format:
1115 user_name_part\@host_name_part\\0
1116*/
1117static constexpr int USER_HOST_BUFF_SIZE =
1119
1121 std::string user;
1122 std::string host;
1123 std::string password;
1125};
1126
1127void generate_random_password(std::string *password, uint32_t);
1128typedef std::list<random_password_info> Userhostpassword_list;
1130 const Userhostpassword_list &generated_passwords);
1131bool lock_and_get_mandatory_roles(std::vector<Role_id> *mandatory_roles);
1133 const std::string &json_blob, bool expect_text);
1134
1135/* helper method to check if sandbox mode should be turned off or not */
1137
1138#if OPENSSL_VERSION_NUMBER >= 0x30000000L
1139bool decrypt_RSA_private_key(uchar *pkt, int cipher_length,
1140 unsigned char *plain_text, size_t plain_text_len,
1141 EVP_PKEY *private_key);
1142#else /* OPENSSL_VERSION_NUMBER >= 0x30000000L */
1143bool decrypt_RSA_private_key(uchar *pkt, int cipher_length,
1144 unsigned char *plain_text, size_t plain_text_len,
1145 RSA *private_key);
1146#endif /* OPENSSL_VERSION_NUMBER >= 0x30000000L */
1147
1148#endif /* AUTH_COMMON_INCLUDED */
uint32_t Access_bitmask
Definition: auth_acls.h:34
mysql_dynamic_priv_table_field
Definition: auth_common.h:362
@ MYSQL_DYNAMIC_PRIV_FIELD_PRIV
Definition: auth_common.h:365
@ MYSQL_DYNAMIC_PRIV_FIELD_HOST
Definition: auth_common.h:364
@ MYSQL_DYNAMIC_PRIV_FIELD_USER
Definition: auth_common.h:363
@ MYSQL_DYNAMIC_PRIV_FIELD_COUNT
Definition: auth_common.h:367
@ MYSQL_DYNAMIC_PRIV_FIELD_WITH_GRANT_OPTION
Definition: auth_common.h:366
mysql_columns_priv_table_field
Definition: auth_common.h:314
@ MYSQL_COLUMNS_PRIV_FIELD_COLUMN_NAME
Definition: auth_common.h:319
@ MYSQL_COLUMNS_PRIV_FIELD_HOST
Definition: auth_common.h:315
@ MYSQL_COLUMNS_PRIV_FIELD_COLUMN_PRIV
Definition: auth_common.h:321
@ MYSQL_COLUMNS_PRIV_FIELD_TABLE_NAME
Definition: auth_common.h:318
@ MYSQL_COLUMNS_PRIV_FIELD_COUNT
Definition: auth_common.h:322
@ MYSQL_COLUMNS_PRIV_FIELD_DB
Definition: auth_common.h:316
@ MYSQL_COLUMNS_PRIV_FIELD_USER
Definition: auth_common.h:317
@ MYSQL_COLUMNS_PRIV_FIELD_TIMESTAMP
Definition: auth_common.h:320
void roles_graphml(THD *thd, String *)
Definition: sql_authorization.cc:4910
bool check_fk_parent_table_access(THD *thd, HA_CREATE_INFO *create_info, Alter_info *alter_info)
Checks foreign key's parent table access.
Definition: sql_authorization.cc:5945
bool check_grant(THD *thd, Access_bitmask want_access, Table_ref *tables, bool any_combination_will_do, uint number, bool no_errors)
Check table level grants.
Definition: sql_authorization.cc:3779
mysql_procs_priv_table_field
Definition: auth_common.h:302
@ MYSQL_PROCS_PRIV_FIELD_PROC_PRIV
Definition: auth_common.h:309
@ MYSQL_PROCS_PRIV_FIELD_ROUTINE_NAME
Definition: auth_common.h:306
@ MYSQL_PROCS_PRIV_FIELD_COUNT
Definition: auth_common.h:311
@ MYSQL_PROCS_PRIV_FIELD_HOST
Definition: auth_common.h:303
@ MYSQL_PROCS_PRIV_FIELD_DB
Definition: auth_common.h:304
@ MYSQL_PROCS_PRIV_FIELD_ROUTINE_TYPE
Definition: auth_common.h:307
@ MYSQL_PROCS_PRIV_FIELD_GRANTOR
Definition: auth_common.h:308
@ MYSQL_PROCS_PRIV_FIELD_USER
Definition: auth_common.h:305
@ MYSQL_PROCS_PRIV_FIELD_TIMESTAMP
Definition: auth_common.h:310
bool acl_check_host(THD *thd, const char *host, const char *ip)
Definition: sql_authentication.cc:2156
void get_privilege_desc(char *to, uint max_length, Access_bitmask access)
Definition: sql_authorization.cc:4536
bool lock_tables_precheck(THD *thd, Table_ref *tables)
Check privileges for LOCK TABLES statement.
Definition: sql_authorization.cc:1718
bool skip_grant_tables()
Definition: sql_auth_cache.cc:163
bool acl_check_proxy_grant_access(THD *thd, const char *host, const char *user, bool with_grant)
Definition: sql_authorization.cc:5565
bool check_global_access(THD *thd, Access_bitmask want_access)
check for global access and give descriptive error message if it fails.
Definition: sql_authorization.cc:5920
int mysql_table_grant(THD *thd, Table_ref *table, List< LEX_USER > &user_list, List< LEX_COLUMN > &column_list, Access_bitmask rights, bool revoke, bool all_current_privileges)
Definition: sql_authorization.cc:2634
void func_current_role(const THD *thd, String *active_role)
Helper function for Item_func_current_role.
Definition: sql_authorization.cc:6281
uint32 global_password_history
Global sysvar: the number of old passwords to check in the history.
Definition: sql_auth_cache.cc:3646
bool mysql_alter_or_clear_default_roles(THD *thd, role_enum role_type, const List< LEX_USER > *users, const List< LEX_USER > *roles)
Set the default roles to NONE, ALL or list of authorization IDs as roles, depending upon the role_typ...
Definition: sql_authorization.cc:6422
int fill_schema_table_privileges(THD *thd, Table_ref *tables, Item *cond)
Definition: sql_authorization.cc:5767
void append_auth_id_string(const THD *thd, const char *user, size_t user_len, const char *host, size_t host_len, String *str)
Append the user@host to the str.
Definition: sql_auth_cache.cc:714
std::pair< LEX_CSTRING, LEX_CSTRING > Auth_id_ref
user, host tuple which reference either acl_cache or g_default_roles
Definition: auth_common.h:80
std::unique_ptr< T, std::function< void(T *)> > Sctx_ptr
Definition: auth_common.h:960
mysql_role_edges_table_field
Definition: auth_common.h:337
@ MYSQL_ROLE_EDGES_FIELD_TO_USER
Definition: auth_common.h:341
@ MYSQL_ROLE_EDGES_FIELD_WITH_ADMIN_OPTION
Definition: auth_common.h:342
@ MYSQL_ROLE_EDGES_FIELD_FROM_USER
Definition: auth_common.h:339
@ MYSQL_ROLE_EDGES_FIELD_TO_HOST
Definition: auth_common.h:340
@ MYSQL_ROLE_EDGES_FIELD_FROM_HOST
Definition: auth_common.h:338
@ MYSQL_ROLE_EDGES_FIELD_COUNT
Definition: auth_common.h:343
void acl_log_connect(const char *user, const char *host, const char *auth_as, const char *db, THD *thd, enum enum_server_command command)
Logging connection for the general query log, extracted from acl_authenticate() as it's reused at dif...
Definition: sql_authentication.cc:3824
bool reload_acl_caches(THD *thd, bool mdl_locked)
Reload all ACL caches.
Definition: sql_auth_cache.cc:3664
bool is_acl_table_name(const char *name)
Check if given table name is a ACL table name.
Definition: sql_user_table.cc:2626
int fill_schema_schema_privileges(THD *thd, Table_ref *tables, Item *cond)
Definition: sql_authorization.cc:5705
std::function< bool(Security_context *, Security_context_policy::Operation)> Security_context_functor
Definition: auth_common.h:933
bool validate_user_plugins
controls the extra checks on plugin availability for mysql.user records
Definition: sql_auth_cache.cc:167
bool mysql_user_table_is_in_short_password_format
void acl_free(bool end=false)
Definition: sql_auth_cache.cc:1984
bool mysql_revoke_role(THD *thd, const List< LEX_USER > *users, const List< LEX_USER > *roles)
Definition: sql_authorization.cc:3091
bool check_acl_tables_intact(THD *thd, bool mdl_locked)
Opens the ACL tables and checks their sanity.
Definition: sql_auth_cache.cc:2108
bool mysql_show_grants(THD *, LEX_USER *, const List_of_auth_id_refs &, bool, bool)
SHOW GRANTS FOR user USING [ALL | role [,role ...]].
Definition: sql_authorization.cc:4804
void init_acl_memory()
Allocates the memory in the the global_acl_memory MEM_ROOT.
Definition: sql_auth_cache.cc:189
bool sp_grant_privileges(THD *thd, const char *sp_db, const char *sp_name, bool is_proc)
Grant EXECUTE,ALTER privilege for a stored procedure.
Definition: sql_authorization.cc:5407
mysql_db_table_field
Definition: auth_common.h:210
@ MYSQL_DB_FIELD_GRANT_PRIV
Definition: auth_common.h:220
@ MYSQL_DB_FIELD_DELETE_PRIV
Definition: auth_common.h:217
@ MYSQL_DB_FIELD_INDEX_PRIV
Definition: auth_common.h:222
@ MYSQL_DB_FIELD_UPDATE_PRIV
Definition: auth_common.h:216
@ MYSQL_DB_FIELD_CREATE_VIEW_PRIV
Definition: auth_common.h:226
@ MYSQL_DB_FIELD_ALTER_PRIV
Definition: auth_common.h:223
@ MYSQL_DB_FIELD_LOCK_TABLES_PRIV
Definition: auth_common.h:225
@ MYSQL_DB_FIELD_COUNT
Definition: auth_common.h:233
@ MYSQL_DB_FIELD_TRIGGER_PRIV
Definition: auth_common.h:232
@ MYSQL_DB_FIELD_CREATE_PRIV
Definition: auth_common.h:218
@ MYSQL_DB_FIELD_CREATE_ROUTINE_PRIV
Definition: auth_common.h:228
@ MYSQL_DB_FIELD_SELECT_PRIV
Definition: auth_common.h:214
@ MYSQL_DB_FIELD_EXECUTE_PRIV
Definition: auth_common.h:230
@ MYSQL_DB_FIELD_INSERT_PRIV
Definition: auth_common.h:215
@ MYSQL_DB_FIELD_EVENT_PRIV
Definition: auth_common.h:231
@ MYSQL_DB_FIELD_ALTER_ROUTINE_PRIV
Definition: auth_common.h:229
@ MYSQL_DB_FIELD_CREATE_TMP_TABLE_PRIV
Definition: auth_common.h:224
@ MYSQL_DB_FIELD_USER
Definition: auth_common.h:213
@ MYSQL_DB_FIELD_HOST
Definition: auth_common.h:211
@ MYSQL_DB_FIELD_DROP_PRIV
Definition: auth_common.h:219
@ MYSQL_DB_FIELD_DB
Definition: auth_common.h:212
@ MYSQL_DB_FIELD_SHOW_VIEW_PRIV
Definition: auth_common.h:227
@ MYSQL_DB_FIELD_REFERENCES_PRIV
Definition: auth_common.h:221
bool is_mandatory_role(LEX_CSTRING role, LEX_CSTRING role_host, bool *is_mandatory)
Determine if a role@role_host authid is a mandatory role.
Definition: sql_authorization.cc:6822
int acl_authenticate(THD *thd, enum_server_command command)
Perform the handshake, authorize the client and update thd sctx variables.
Definition: sql_authentication.cc:3960
const std::vector< std::string > global_acls_vector
Consts for static privileges.
Definition: auth_acls.cc:62
bool lock_and_get_mandatory_roles(std::vector< Role_id > *mandatory_roles)
Copy a list of mandatory role authorization IDs.
Definition: sql_authorization.cc:6334
Auth_id_ref create_authid_from(const LEX_USER *user)
Definition: sql_authorization.cc:6660
bool mysql_grant_role(THD *thd, const List< LEX_USER > *users, const List< LEX_USER > *roles, bool with_admin_opt)
Grants a list of roles to a list of users.
Definition: sql_authorization.cc:3320
bool check_change_password(THD *thd, const char *host, const char *user, bool retain_current_password)
Definition: sql_user.cc:157
int wild_case_compare(CHARSET_INFO *cs, const char *str, const char *wildstr)
Definition: sql_auth_cache.cc:799
bool mysql_alter_user_comment(THD *thd, const List< LEX_USER > *users, const std::string &json_blob, bool expect_text)
void get_mqh(THD *thd, const char *user, const char *host, USER_CONN *uc)
Definition: sql_auth_cache.cc:3111
bool is_acl_table(const TABLE *table)
Check if given TABLE* is a ACL table name.
Definition: sql_user_table.cc:2644
bool mysql_show_create_user(THD *thd, LEX_USER *user, bool are_both_users_same)
Auxiliary function for constructing CREATE USER sql for a given user.
Definition: sql_user.cc:260
bool is_granted_table_access(THD *thd, Access_bitmask required_acl, Table_ref *table)
Given a Table_ref object this function checks against.
Definition: sql_authorization.cc:2449
bool do_auto_cert_generation(ssl_artifacts_status auto_detection_status, const char **ssl_ca, const char **ssl_key, const char **ssl_cert)
Check auto_generate_certs option and generate SSL certificates if required.
Definition: sql_authentication.cc:5718
const char * any_db
Definition: sql_authorization.cc:524
bool check_lock_view_underlying_table_access(THD *thd, Table_ref *tbl, bool *fake_lock_tables_acl)
For LOCK TABLES on a view checks if user in which context view is executed or user that has initiated...
Definition: sql_authorization.cc:6009
void set_connection_admin_flag(THD *thd, bool check_for_main_security_ctx=false)
Set the connection_admin flag in the THD.
Definition: auth_common.cc:189
bool mysql_rename_user(THD *thd, List< LEX_USER > &list)
Definition: sql_user.cc:3207
bool grant_init(bool skip_grant_tables)
Initialize structures responsible for table/column-level privilege checking and load information for ...
Definition: sql_auth_cache.cc:2352
uint32 global_password_reuse_interval
Definition: auth_common.h:921
void commit_and_close_mysql_tables(THD *thd)
A helper function to commit statement transaction and close ACL tables after reading some data from t...
Definition: sql_user_table.cc:509
bool check_column_grant_in_table_ref(THD *thd, Table_ref *table_ref, const char *name, size_t length, Access_bitmask want_privilege)
Check the privileges for a column depending on the type of table.
Definition: sql_authorization.cc:4044
std::vector< Auth_id_ref > List_of_auth_id_refs
Definition: auth_common.h:81
void set_system_user_flag(THD *thd, bool check_for_main_security_ctx=false)
Set the system_user flag in the THD.
Definition: auth_common.cc:166
bool acl_getroot(THD *thd, Security_context *sctx, const char *user, const char *host, const char *ip, const char *db)
Definition: sql_auth_cache.cc:1506
Access_bitmask get_table_grant(THD *thd, Table_ref *table)
Definition: sql_authorization.cc:4435
ulong get_global_acl_cache_size()
Definition: sql_auth_cache.cc:110
bool create_table_precheck(THD *thd, Table_ref *tables, Table_ref *create_table)
CREATE TABLE query pre-check.
Definition: sql_authorization.cc:1746
bool mysql_set_active_role_none(THD *thd)
Reset active roles.
Definition: sql_authorization.cc:6724
Access_bitmask acl_get(THD *thd, const char *host, const char *ip, const char *user, const char *db, bool db_is_pattern)
Get privilege for a host, user, and db combination.
Definition: sql_auth_cache.cc:1351
bool check_readonly(THD *thd, bool err_if_readonly)
Performs standardized check whether to prohibit (true) or allow (false) operations based on read_only...
Definition: sql_authorization.cc:1848
bool acl_init(bool dont_read_acl_tables)
Definition: sql_auth_cache.cc:1750
bool acl_can_access_user(THD *thd, LEX_USER *user)
Auxiliary function for the CAN_ACCESS_USER internal function used to check if a row from mysql....
Definition: sql_user.cc:209
bool mysql_routine_grant(THD *thd, Table_ref *table, bool is_proc, List< LEX_USER > &user_list, Access_bitmask rights, bool revoke, bool write_to_binlog, bool all_current_privileges)
Store routine level grants in the privilege tables.
Definition: sql_authorization.cc:2925
bool check_routine_access(THD *thd, Access_bitmask want_access, const char *db, char *name, bool is_proc, bool no_errors)
Definition: sql_authorization.cc:1979
bool change_password(THD *thd, LEX_USER *user, const char *password, const char *current_password, bool retain_current_password)
Change a password hash for a user.
Definition: sql_user.cc:2038
std::list< random_password_info > Userhostpassword_list
Definition: auth_common.h:1128
const ACL_internal_schema_access * get_cached_schema_access(GRANT_INTERNAL_INFO *grant_internal_info, const char *schema_name)
Get a cached internal schema access.
Definition: sql_authorization.cc:1652
bool send_password_result_set(THD *thd, const Userhostpassword_list &generated_passwords)
Sends the result set of generated passwords to the client.
Definition: sql_user.cc:979
bool operator<(const Auth_id_ref &a, const Auth_id_ref &b)
Definition: sql_authorization.cc:7493
std::string create_authid_str_from(const LEX_USER *user)
Helper used for producing a key to a key-value-map.
Definition: sql_authorization.cc:6652
bool check_grant_all_columns(THD *thd, Access_bitmask want_access, Field_iterator_table_ref *fields)
check if a query can access a set of columns
Definition: sql_authorization.cc:4122
bool mysql_set_active_role_all(THD *thd, const List< LEX_USER > *except_users)
Activates all granted role in the current security context.
Definition: sql_authorization.cc:6768
bool mysql_revoke_all(THD *thd, List< LEX_USER > &list)
Definition: sql_authorization.cc:5149
ACL_internal_access_result
Definition: auth_common.h:85
@ ACL_INTERNAL_ACCESS_GRANTED
Access granted for all the requested privileges, do not use the grant tables.
Definition: auth_common.h:92
@ ACL_INTERNAL_ACCESS_CHECK_GRANT
No decision yet, use the grant tables.
Definition: auth_common.h:96
@ ACL_INTERNAL_ACCESS_DENIED
Access denied, do not use the grant tables.
Definition: auth_common.h:94
bool turn_off_sandbox_mode(THD *thd, LEX_USER *user)
Helper method to turn off sandbox mode once registration step is complete.
Definition: sql_user.cc:1023
mysql_password_history_table_field
Definition: auth_common.h:354
@ MYSQL_PASSWORD_HISTORY_FIELD_COUNT
Definition: auth_common.h:359
@ MYSQL_PASSWORD_HISTORY_FIELD_PASSWORD_TIMESTAMP
Definition: auth_common.h:357
@ MYSQL_PASSWORD_HISTORY_FIELD_HOST
Definition: auth_common.h:355
@ MYSQL_PASSWORD_HISTORY_FIELD_USER
Definition: auth_common.h:356
@ MYSQL_PASSWORD_HISTORY_FIELD_PASSWORD
Definition: auth_common.h:358
bool mysql_create_user(THD *thd, List< LEX_USER > &list, bool if_not_exists, bool is_role)
Definition: sql_user.cc:2769
bool check_table_access(THD *thd, Access_bitmask requirements, Table_ref *tables, bool any_combination_of_privileges_will_do, uint number, bool no_errors)
Check if the requested privileges exists in either User-, DB- or, tables- tables.
Definition: sql_authorization.cc:2344
void fill_effective_table_privileges(THD *thd, GRANT_INFO *grant, const char *db, const char *table)
Definition: sql_authorization.cc:5497
bool operator==(const LEX_CSTRING &a, const LEX_CSTRING &b)
Definition: sql_authorization.cc:7510
void get_default_roles(const Auth_id_ref &user, List_of_auth_id_refs &list)
Shallow copy a list of default role authorization IDs from an Role_id storage.
Definition: sql_authorization.cc:6312
int fill_schema_column_privileges(THD *thd, Table_ref *tables, Item *cond)
Definition: sql_authorization.cc:5832
bool check_table_encryption_admin_access(THD *thd)
Check if a current user has the privilege TABLE_ENCRYPTION_ADMIN required to create encrypted table.
Definition: sql_authorization.cc:2415
bool is_role_id(LEX_USER *authid)
Definition: sql_authorization.cc:806
bool is_granted_role(LEX_CSTRING user, LEX_CSTRING host, LEX_CSTRING role, LEX_CSTRING role_host)
This function works just like check_if_granted_role, but also guarantees that the proper lock is take...
Definition: sql_authorization.cc:6801
mysql_default_roles_table_field
Definition: auth_common.h:346
@ MYSQL_DEFAULT_ROLES_FIELD_DEFAULT_ROLE_USER
Definition: auth_common.h:350
@ MYSQL_DEFAULT_ROLES_FIELD_COUNT
Definition: auth_common.h:351
@ MYSQL_DEFAULT_ROLES_FIELD_DEFAULT_ROLE_HOST
Definition: auth_common.h:349
@ MYSQL_DEFAULT_ROLES_FIELD_HOST
Definition: auth_common.h:347
@ MYSQL_DEFAULT_ROLES_FIELD_USER
Definition: auth_common.h:348
void append_identifier(String *packet, const char *name, size_t length)
Convert and quote the given identifier if needed and append it to the target string.
Definition: sql_show.cc:1462
bool is_acl_user(THD *thd, const char *host, const char *user)
Definition: sql_auth_cache.cc:1219
void update_mandatory_roles(void)
Definition: sql_authorization.cc:7344
bool has_full_view_routine_access(THD *thd, const char *db, const char *definer_user, const char *definer_host)
Check if user has full access to view routine's properties (i.e including stored routine code).
Definition: sql_authorization.cc:2061
void notify_flush_event(THD *thd)
Audit notification for flush.
Definition: sql_auth_cache.cc:1692
bool is_secure_transport(int vio_type)
Definition: sql_authentication.cc:4395
bool disconnect_on_expired_password
Definition: sql_authentication.cc:1279
bool wildcard_db_grant_exists()
mysql_tables_priv_table_field
Definition: auth_common.h:325
@ MYSQL_TABLES_PRIV_FIELD_HOST
Definition: auth_common.h:326
@ MYSQL_TABLES_PRIV_FIELD_GRANTOR
Definition: auth_common.h:330
@ MYSQL_TABLES_PRIV_FIELD_COUNT
Definition: auth_common.h:334
@ MYSQL_TABLES_PRIV_FIELD_COLUMN_PRIV
Definition: auth_common.h:333
@ MYSQL_TABLES_PRIV_FIELD_TABLE_NAME
Definition: auth_common.h:329
@ MYSQL_TABLES_PRIV_FIELD_TABLE_PRIV
Definition: auth_common.h:332
@ MYSQL_TABLES_PRIV_FIELD_TIMESTAMP
Definition: auth_common.h:331
@ MYSQL_TABLES_PRIV_FIELD_USER
Definition: auth_common.h:328
@ MYSQL_TABLES_PRIV_FIELD_DB
Definition: auth_common.h:327
void shutdown_acl_cache()
Shutdown the global Acl_cache system which was only initialized if the rwlocks were initialized.
Definition: sql_auth_cache.cc:3455
void log_user(THD *thd, String *str, LEX_USER *user, bool comma)
Auxiliary function for constructing a user list string.
Definition: sql_user.cc:125
bool check_grant_routine(THD *thd, Access_bitmask want_access, Table_ref *procs, bool is_proc, bool no_error)
Definition: sql_authorization.cc:4333
bool sp_revoke_privileges(THD *thd, const char *sp_db, const char *sp_name, bool is_proc)
Revoke privileges for all users on a stored procedure.
Definition: sql_authorization.cc:5318
mysql_proxies_priv_table_feild
Definition: auth_common.h:291
@ MYSQL_PROXIES_PRIV_FIELD_HOST
Definition: auth_common.h:292
@ MYSQL_PROXIES_PRIV_FIELD_PROXIED_USER
Definition: auth_common.h:295
@ MYSQL_PROXIES_PRIV_FIELD_PROXIED_HOST
Definition: auth_common.h:294
@ MYSQL_PROXIES_PRIV_FIELD_COUNT
Definition: auth_common.h:299
@ MYSQL_PROXIES_PRIV_FIELD_WITH_GRANT
Definition: auth_common.h:296
@ MYSQL_PROXIES_PRIV_FIELD_USER
Definition: auth_common.h:293
@ MYSQL_PROXIES_PRIV_FIELD_GRANTOR
Definition: auth_common.h:297
@ MYSQL_PROXIES_PRIV_FIELD_TIMESTAMP
Definition: auth_common.h:298
void err_readonly(THD *thd)
Generates appropriate error messages for read-only state depending on whether user has SUPER privileg...
Definition: sql_authorization.cc:1884
void grant_free(void)
Definition: sql_auth_cache.cc:2332
bool check_some_access(THD *thd, Access_bitmask want_access, Table_ref *table)
Check if the given table has any of the asked privileges.
Definition: sql_authorization.cc:2031
bool check_grant_db(THD *thd, const char *db, const bool check_table_grant=false)
Check if a user has the right to access a database.
Definition: sql_authorization.cc:4271
bool check_single_table_access(THD *thd, Access_bitmask privilege, Table_ref *tables, bool no_errors)
Check grants for commands which work only with one table.
Definition: sql_authorization.cc:1945
void generate_random_password(std::string *password, uint32_t)
Generates a random password of the length decided by the system variable generated_random_password_le...
Definition: sql_user.cc:959
bool decrypt_RSA_private_key(uchar *pkt, int cipher_length, unsigned char *plain_text, size_t plain_text_len, RSA *private_key)
Decrypt pkt data using RSA private key.
Definition: auth_common.cc:229
bool is_acl_inited()
Definition: sql_auth_cache.cc:3895
std::pair< std::string, std::string > get_authid_from_quoted_string(std::string str)
Return the unquoted authorization id as a user,host-tuple.
Definition: sql_authorization.cc:4610
ssl_artifacts_status
Definition: auth_common.h:899
@ SSL_ARTIFACTS_VIA_OPTIONS
Definition: auth_common.h:901
@ SSL_ARTIFACTS_AUTO_DETECTED
Definition: auth_common.h:903
@ SSL_ARTIFACT_TRACES_FOUND
Definition: auth_common.h:902
@ SSL_ARTIFACTS_NOT_FOUND
Definition: auth_common.h:900
Access_bitmask get_column_grant(THD *thd, GRANT_INFO *grant, const char *db_name, const char *table_name, const char *field_name)
Definition: sql_authorization.cc:4475
bool mysql_drop_user(THD *thd, List< LEX_USER > &list, bool if_exists, bool drop_role)
Drop a list of users and all their privileges.
Definition: sql_user.cc:3055
bool is_partial_revoke_exists(THD *thd)
Method to check if there exists at least one partial revokes in the cache.
Definition: sql_auth_cache.cc:3879
bool mysql_set_active_role(THD *thd, const List< LEX_USER > *role_list)
Definition: sql_authorization.cc:6778
bool mysql_alter_user(THD *thd, List< LEX_USER > &list, bool if_exists)
Definition: sql_user.cc:3402
int fill_schema_user_privileges(THD *thd, Table_ref *tables, Item *cond)
Definition: sql_authorization.cc:5629
bool mysql_grant(THD *thd, const char *db, List< LEX_USER > &list, Access_bitmask rights, bool revoke_grant, bool is_proxy, const List< LEX_CSTRING > &dynamic_privilege, bool grant_all_current_privileges, LEX_GRANT_AS *grant_as)
Definition: sql_authorization.cc:3443
mysql_user_table_field
Definition: auth_common.h:236
@ MYSQL_USER_FIELD_CREATE_TABLESPACE_PRIV
Definition: auth_common.h:267
@ MYSQL_USER_FIELD_SUPER_PRIV
Definition: auth_common.h:254
@ MYSQL_USER_FIELD_DROP_PRIV
Definition: auth_common.h:244
@ MYSQL_USER_FIELD_ACCOUNT_LOCKED
Definition: auth_common.h:281
@ MYSQL_USER_FIELD_SSL_TYPE
Definition: auth_common.h:268
@ MYSQL_USER_FIELD_SSL_CIPHER
Definition: auth_common.h:269
@ MYSQL_USER_FIELD_REPL_CLIENT_PRIV
Definition: auth_common.h:259
@ MYSQL_USER_FIELD_MAX_USER_CONNECTIONS
Definition: auth_common.h:275
@ MYSQL_USER_FIELD_COUNT
Definition: auth_common.h:288
@ MYSQL_USER_FIELD_PROCESS_PRIV
Definition: auth_common.h:247
@ MYSQL_USER_FIELD_SELECT_PRIV
Definition: auth_common.h:239
@ MYSQL_USER_FIELD_USER
Definition: auth_common.h:238
@ MYSQL_USER_FIELD_MAX_CONNECTIONS
Definition: auth_common.h:274
@ MYSQL_USER_FIELD_REFERENCES_PRIV
Definition: auth_common.h:250
@ MYSQL_USER_FIELD_PASSWORD_EXPIRED
Definition: auth_common.h:278
@ MYSQL_USER_FIELD_CREATE_ROUTINE_PRIV
Definition: auth_common.h:262
@ MYSQL_USER_FIELD_ALTER_ROUTINE_PRIV
Definition: auth_common.h:263
@ MYSQL_USER_FIELD_PLUGIN
Definition: auth_common.h:276
@ MYSQL_USER_FIELD_MAX_UPDATES
Definition: auth_common.h:273
@ MYSQL_USER_FIELD_EVENT_PRIV
Definition: auth_common.h:265
@ MYSQL_USER_FIELD_RELOAD_PRIV
Definition: auth_common.h:245
@ MYSQL_USER_FIELD_UPDATE_PRIV
Definition: auth_common.h:241
@ MYSQL_USER_FIELD_TRIGGER_PRIV
Definition: auth_common.h:266
@ MYSQL_USER_FIELD_X509_ISSUER
Definition: auth_common.h:270
@ MYSQL_USER_FIELD_LOCK_TABLES_PRIV
Definition: auth_common.h:256
@ MYSQL_USER_FIELD_CREATE_ROLE_PRIV
Definition: auth_common.h:282
@ MYSQL_USER_FIELD_PASSWORD_LAST_CHANGED
Definition: auth_common.h:279
@ MYSQL_USER_FIELD_INSERT_PRIV
Definition: auth_common.h:240
@ MYSQL_USER_FIELD_REPL_SLAVE_PRIV
Definition: auth_common.h:258
@ MYSQL_USER_FIELD_FILE_PRIV
Definition: auth_common.h:248
@ MYSQL_USER_FIELD_DROP_ROLE_PRIV
Definition: auth_common.h:283
@ MYSQL_USER_FIELD_INDEX_PRIV
Definition: auth_common.h:251
@ MYSQL_USER_FIELD_HOST
Definition: auth_common.h:237
@ MYSQL_USER_FIELD_PASSWORD_LIFETIME
Definition: auth_common.h:280
@ MYSQL_USER_FIELD_X509_SUBJECT
Definition: auth_common.h:271
@ MYSQL_USER_FIELD_AUTHENTICATION_STRING
Definition: auth_common.h:277
@ MYSQL_USER_FIELD_SHOW_DB_PRIV
Definition: auth_common.h:253
@ MYSQL_USER_FIELD_SHOW_VIEW_PRIV
Definition: auth_common.h:261
@ MYSQL_USER_FIELD_CREATE_USER_PRIV
Definition: auth_common.h:264
@ MYSQL_USER_FIELD_EXECUTE_PRIV
Definition: auth_common.h:257
@ MYSQL_USER_FIELD_MAX_QUESTIONS
Definition: auth_common.h:272
@ MYSQL_USER_FIELD_CREATE_VIEW_PRIV
Definition: auth_common.h:260
@ MYSQL_USER_FIELD_SHUTDOWN_PRIV
Definition: auth_common.h:246
@ MYSQL_USER_FIELD_CREATE_PRIV
Definition: auth_common.h:243
@ MYSQL_USER_FIELD_ALTER_PRIV
Definition: auth_common.h:252
@ MYSQL_USER_FIELD_CREATE_TMP_TABLE_PRIV
Definition: auth_common.h:255
@ MYSQL_USER_FIELD_GRANT_PRIV
Definition: auth_common.h:249
@ MYSQL_USER_FIELD_PASSWORD_REQUIRE_CURRENT
Definition: auth_common.h:286
@ MYSQL_USER_FIELD_PASSWORD_REUSE_TIME
Definition: auth_common.h:285
@ MYSQL_USER_FIELD_USER_ATTRIBUTES
Definition: auth_common.h:287
@ MYSQL_USER_FIELD_DELETE_PRIV
Definition: auth_common.h:242
@ MYSQL_USER_FIELD_PASSWORD_REUSE_HISTORY
Definition: auth_common.h:284
bool hostname_requires_resolving(const char *hostname)
Check if the given host name needs to be resolved or not.
Definition: sql_auth_cache.cc:878
bool has_grant_role_privilege(THD *thd, const List< LEX_USER > *roles)
Definition: sql_authorization.cc:2521
bool mysql_set_role_default(THD *thd)
Activates all the default roles in the current security context.
Definition: sql_authorization.cc:6745
bool check_authorization_id_string(THD *thd, LEX_STRING &mandatory_roles)
Definition: sql_authorization.cc:7256
bool check_engine_type_for_acl_table(THD *thd, bool mdl_locked)
Definition: sql_auth_cache.cc:2012
bool check_access(THD *thd, Access_bitmask want_access, const char *db, Access_bitmask *save_priv, GRANT_INTERNAL_INFO *grant_internal_info, bool dont_check_global_grants, bool no_errors)
Compare requested privileges with the privileges acquired from the User- and Db-tables.
Definition: sql_authorization.cc:2141
bool has_partial_view_routine_access(THD *thd, const char *db, const char *routine_name, bool is_proc)
Check if user has partial access to view routine's properties (i.e.
Definition: sql_authorization.cc:2089
bool check_one_table_access(THD *thd, Access_bitmask privilege, Table_ref *tables)
Check grants for commands which work only with one table and all other tables belonging to subselects...
Definition: sql_authorization.cc:1905
bool check_grant_column(THD *thd, GRANT_INFO *grant, const char *db_name, const char *table_name, const char *name, size_t length, Security_context *sctx, Access_bitmask want_privilege)
Definition: sql_authorization.cc:3964
static constexpr int USER_HOST_BUFF_SIZE
Length of string buffer, that is enough to contain username and hostname parts of the user identifier...
Definition: auth_common.h:1117
bool opt_auto_generate_certs
Definition: sql_authentication.cc:1295
bool drop_role(THD *thd, TABLE *edge_table, TABLE *defaults_table, const Auth_id_ref &authid_user)
Definition: sql_authorization.cc:634
Definition: sql_auth_cache.h:247
Per internal schema ACL access rules.
Definition: auth_common.h:145
virtual const ACL_internal_table_access * lookup(const char *name) const =0
Search for per table ACL access rules by table name.
virtual ACL_internal_access_result check(Access_bitmask want_access, Access_bitmask *save_priv, bool any_combination_will_do) const =0
Check access to an internal schema.
virtual ~ACL_internal_schema_access()=default
ACL_internal_schema_access()=default
A registry for per internal schema ACL.
Definition: auth_common.h:183
static const ACL_internal_schema_access * lookup(const char *name)
Search per internal schema ACL by name.
Definition: sql_auth_cache.cc:213
static void register_schema(const LEX_CSTRING &name, const ACL_internal_schema_access *access)
Add an internal schema to the registry.
Definition: sql_auth_cache.cc:198
Per internal table ACL access rules.
Definition: auth_common.h:107
virtual ACL_internal_access_result check(Access_bitmask want_access, Access_bitmask *save_priv, bool any_combination_will_do) const =0
Check access to an internal table.
virtual ~ACL_internal_table_access()=default
ACL_internal_table_access()=default
Data describing the table being created by CREATE TABLE or altered by ALTER TABLE.
Definition: sql_alter.h:205
Storage container for default auth ids.
Definition: auth_common.h:1070
const std::string & host() const
Definition: auth_common.cc:125
std::string m_user
User part.
Definition: auth_common.h:1093
Auth_id & operator=(const Auth_id &)=default
void create_key()
Definition: auth_common.cc:57
const std::string & user() const
Definition: auth_common.cc:124
bool operator<(const Auth_id &id) const
Definition: auth_common.cc:101
std::string auth_str() const
Definition: auth_common.cc:116
std::string m_key
Key: Internal representation mainly to facilitate use of Auth_id class in standard container.
Definition: auth_common.h:1101
std::string m_host
Host part.
Definition: auth_common.h:1095
Definition: auth_common.h:936
bool operator()(Security_context *sctx, Operation op) override
Definition: auth_common.h:938
Definition: auth_common.h:1007
const THD * m_thd
Definition: auth_common.h:1014
bool create(Security_context *sctx)
Create a local authid without modifying any tables.
Definition: sql_authorization.cc:7370
Default_local_authid(const THD *thd)
Definition: sql_authorization.cc:7350
bool precheck(Security_context *sctx)
Check if the security context can be created as a local authid.
Definition: sql_authorization.cc:7359
Definition: auth_common.h:1034
Drop_temporary_dynamic_privileges(std::vector< std::string > privs)
Definition: auth_common.h:1036
void operator()(Security_context *sctx)
Definition: sql_authorization.cc:7396
std::vector< std::string > m_privs
Definition: auth_common.h:1041
Generic iterator over the fields of an arbitrary table reference.
Definition: table.h:4143
Definition: auth_common.h:948
bool operator()(Security_context *sctx, Operation op) override
Definition: auth_common.h:950
Grant the privilege temporarily to the in-memory global privileges map.
Definition: auth_common.h:1022
const std::vector< std::string > m_privs
Definition: auth_common.h:1031
Grant_temporary_dynamic_privileges(const THD *thd, std::vector< std::string > privs)
Definition: sql_authorization.cc:7374
bool grant_privileges(Security_context *sctx)
Grant dynamic privileges to an in-memory global authid.
Definition: sql_authorization.cc:7390
const THD * m_thd
Definition: auth_common.h:1030
bool precheck(Security_context *sctx)
Definition: sql_authorization.cc:7378
Definition: auth_common.h:1045
bool grant_privileges(Security_context *sctx)
Definition: sql_authorization.cc:7410
bool precheck(Security_context *sctx)
Definition: sql_authorization.cc:7405
Grant_temporary_static_privileges(const THD *thd, const Access_bitmask privs)
Definition: sql_authorization.cc:7401
const THD * m_thd
THD handle.
Definition: auth_common.h:1053
const Access_bitmask m_privs
Privileges.
Definition: auth_common.h:1056
Extension of ACL_internal_schema_access for Information Schema.
Definition: auth_common.h:193
~IS_internal_schema_access() override=default
IS_internal_schema_access()=default
const ACL_internal_table_access * lookup(const char *name) const override
Search for per table ACL access rules by table name.
Definition: sql_authorization.cc:1702
ACL_internal_access_result check(Access_bitmask want_access, Access_bitmask *save_priv, bool any_combination_will_do) const override
Check access to an internal schema.
Definition: sql_authorization.cc:1685
Base class that is used to represent any kind of expression in a relational query.
Definition: item.h:936
Definition: sql_lex.h:3727
Definition: sql_lex.h:3739
Definition: sql_list.h:467
Factory for creating any Security_context given a pre-constructed policy.
Definition: auth_common.h:965
Security_context_functor m_static_privileges
Definition: auth_common.h:1003
Security_context_functor m_privileges
Definition: auth_common.h:1002
Security_context_factory(THD *thd, std::string user, std::string host, Security_context_functor extend_user_profile, Security_context_functor priv, Security_context_functor static_priv, std::function< void(Security_context *)> drop_policy)
Default Security_context factory implementation.
Definition: auth_common.h:980
std::string m_user
Definition: auth_common.h:999
Sctx_ptr< Security_context > create()
Definition: sql_authorization.cc:7446
std::string m_host
Definition: auth_common.h:1000
bool apply_pre_constructed_policies(Security_context *sctx)
Definition: sql_authorization.cc:7416
Security_context_functor m_user_profile
Definition: auth_common.h:1001
THD * m_thd
Definition: auth_common.h:998
const std::function< void(Security_context *)> m_drop_policy
Definition: auth_common.h:1004
A set of THD members describing the current authenticated user.
Definition: sql_security_ctx.h:54
Using this class is fraught with peril, and you need to be very careful when doing so.
Definition: sql_string.h:167
For each client connection we create a separate thread with THD serving as a thread/connection descri...
Definition: sql_lexer_thd.h:36
Definition: table.h:2864
Definition: auth_common.h:439
uint repl_client_priv_idx() override
Definition: auth_common.h:480
uint max_user_connections_idx() override
Definition: auth_common.h:510
uint plugin_idx() override
Definition: auth_common.h:513
uint create_tablespace_priv_idx() override
Definition: auth_common.h:498
uint account_locked_idx() override
Definition: auth_common.h:526
uint create_priv_idx() override
Definition: auth_common.h:452
uint create_tmp_table_priv_idx() override
Definition: auth_common.h:470
uint password_idx() override
Definition: auth_common.h:444
uint trigger_priv_idx() override
Definition: auth_common.h:497
uint max_questions_idx() override
Definition: auth_common.h:505
uint create_view_priv_idx() override
Definition: auth_common.h:483
uint index_priv_idx() override
Definition: auth_common.h:462
uint insert_priv_idx() override
Definition: auth_common.h:449
uint user_idx() override
Definition: auth_common.h:442
uint alter_routine_priv_idx() override
Definition: auth_common.h:490
uint create_user_priv_idx() override
Definition: auth_common.h:493
uint password_reuse_time_idx() override
Definition: auth_common.h:530
uint password_expired_idx() override
Definition: auth_common.h:517
uint password_require_current_idx() override
Definition: auth_common.h:533
uint shutdown_priv_idx() override
Definition: auth_common.h:455
uint drop_priv_idx() override
Definition: auth_common.h:453
uint host_idx() override
Definition: auth_common.h:441
uint file_priv_idx() override
Definition: auth_common.h:457
uint authentication_string_idx() override
Definition: auth_common.h:514
uint drop_role_priv_idx() override
Definition: auth_common.h:469
uint repl_slave_priv_idx() override
Definition: auth_common.h:477
uint x509_subject_idx() override
Definition: auth_common.h:504
uint references_priv_idx() override
Definition: auth_common.h:459
uint password_lifetime_idx() override
Definition: auth_common.h:523
uint event_priv_idx() override
Definition: auth_common.h:496
uint process_priv_idx() override
Definition: auth_common.h:456
uint max_connections_idx() override
Definition: auth_common.h:507
uint password_reuse_history_idx() override
Definition: auth_common.h:527
uint create_routine_priv_idx() override
Definition: auth_common.h:487
uint ssl_cipher_idx() override
Definition: auth_common.h:502
uint super_priv_idx() override
Definition: auth_common.h:465
uint update_priv_idx() override
Definition: auth_common.h:450
uint reload_priv_idx() override
Definition: auth_common.h:454
uint create_role_priv_idx() override
Definition: auth_common.h:466
uint password_last_changed_idx() override
Definition: auth_common.h:520
uint lock_tables_priv_idx() override
Definition: auth_common.h:473
uint show_db_priv_idx() override
Definition: auth_common.h:464
uint user_attributes_idx() override
Definition: auth_common.h:536
uint x509_issuer_idx() override
Definition: auth_common.h:503
uint grant_priv_idx() override
Definition: auth_common.h:458
uint ssl_type_idx() override
Definition: auth_common.h:501
uint alter_priv_idx() override
Definition: auth_common.h:463
uint max_updates_idx() override
Definition: auth_common.h:506
uint execute_priv_idx() override
Definition: auth_common.h:476
uint select_priv_idx() override
Definition: auth_common.h:448
uint show_view_priv_idx() override
Definition: auth_common.h:486
uint delete_priv_idx() override
Definition: auth_common.h:451
Definition: auth_common.h:544
uint file_priv_idx() override
Definition: auth_common.h:607
uint user_idx() override
Definition: auth_common.h:594
uint insert_priv_idx() override
Definition: auth_common.h:597
uint shutdown_priv_idx() override
Definition: auth_common.h:603
uint account_locked_idx() override
Definition: auth_common.h:676
uint x509_issuer_idx() override
Definition: auth_common.h:651
uint password_reuse_time_idx() override
Definition: auth_common.h:682
uint host_idx() override
Definition: auth_common.h:593
uint x509_subject_idx() override
Definition: auth_common.h:652
uint index_priv_idx() override
Definition: auth_common.h:612
mysql_user_table_field_56
Definition: auth_common.h:546
@ MYSQL_USER_FIELD_SUPER_PRIV_56
Definition: auth_common.h:565
@ MYSQL_USER_FIELD_SELECT_PRIV_56
Definition: auth_common.h:550
@ MYSQL_USER_FIELD_REFERENCES_PRIV_56
Definition: auth_common.h:561
@ MYSQL_USER_FIELD_SHOW_DB_PRIV_56
Definition: auth_common.h:564
@ MYSQL_USER_FIELD_UPDATE_PRIV_56
Definition: auth_common.h:552
@ MYSQL_USER_FIELD_DROP_PRIV_56
Definition: auth_common.h:555
@ MYSQL_USER_FIELD_PLUGIN_56
Definition: auth_common.h:587
@ MYSQL_USER_FIELD_FILE_PRIV_56
Definition: auth_common.h:559
@ MYSQL_USER_FIELD_X509_SUBJECT_56
Definition: auth_common.h:582
@ MYSQL_USER_FIELD_REPL_CLIENT_PRIV_56
Definition: auth_common.h:570
@ MYSQL_USER_FIELD_PASSWORD_56
Definition: auth_common.h:549
@ MYSQL_USER_FIELD_MAX_USER_CONNECTIONS_56
Definition: auth_common.h:586
@ MYSQL_USER_FIELD_X509_ISSUER_56
Definition: auth_common.h:581
@ MYSQL_USER_FIELD_PROCESS_PRIV_56
Definition: auth_common.h:558
@ MYSQL_USER_FIELD_ALTER_ROUTINE_PRIV_56
Definition: auth_common.h:574
@ MYSQL_USER_FIELD_COUNT_56
Definition: auth_common.h:590
@ MYSQL_USER_FIELD_EVENT_PRIV_56
Definition: auth_common.h:576
@ MYSQL_USER_FIELD_SHUTDOWN_PRIV_56
Definition: auth_common.h:557
@ MYSQL_USER_FIELD_SSL_TYPE_56
Definition: auth_common.h:579
@ MYSQL_USER_FIELD_SSL_CIPHER_56
Definition: auth_common.h:580
@ MYSQL_USER_FIELD_CREATE_VIEW_PRIV_56
Definition: auth_common.h:571
@ MYSQL_USER_FIELD_DELETE_PRIV_56
Definition: auth_common.h:553
@ MYSQL_USER_FIELD_MAX_CONNECTIONS_56
Definition: auth_common.h:585
@ MYSQL_USER_FIELD_CREATE_USER_PRIV_56
Definition: auth_common.h:575
@ MYSQL_USER_FIELD_CREATE_ROUTINE_PRIV_56
Definition: auth_common.h:573
@ MYSQL_USER_FIELD_CREATE_PRIV_56
Definition: auth_common.h:554
@ MYSQL_USER_FIELD_EXECUTE_PRIV_56
Definition: auth_common.h:568
@ MYSQL_USER_FIELD_MAX_QUESTIONS_56
Definition: auth_common.h:583
@ MYSQL_USER_FIELD_HOST_56
Definition: auth_common.h:547
@ MYSQL_USER_FIELD_GRANT_PRIV_56
Definition: auth_common.h:560
@ MYSQL_USER_FIELD_AUTHENTICATION_STRING_56
Definition: auth_common.h:588
@ MYSQL_USER_FIELD_RELOAD_PRIV_56
Definition: auth_common.h:556
@ MYSQL_USER_FIELD_SHOW_VIEW_PRIV_56
Definition: auth_common.h:572
@ MYSQL_USER_FIELD_LOCK_TABLES_PRIV_56
Definition: auth_common.h:567
@ MYSQL_USER_FIELD_TRIGGER_PRIV_56
Definition: auth_common.h:577
@ MYSQL_USER_FIELD_PASSWORD_EXPIRED_56
Definition: auth_common.h:589
@ MYSQL_USER_FIELD_CREATE_TMP_TABLE_PRIV_56
Definition: auth_common.h:566
@ MYSQL_USER_FIELD_CREATE_TABLESPACE_PRIV_56
Definition: auth_common.h:578
@ MYSQL_USER_FIELD_USER_56
Definition: auth_common.h:548
@ MYSQL_USER_FIELD_INSERT_PRIV_56
Definition: auth_common.h:551
@ MYSQL_USER_FIELD_INDEX_PRIV_56
Definition: auth_common.h:562
@ MYSQL_USER_FIELD_ALTER_PRIV_56
Definition: auth_common.h:563
@ MYSQL_USER_FIELD_REPL_SLAVE_PRIV_56
Definition: auth_common.h:569
@ MYSQL_USER_FIELD_MAX_UPDATES_56
Definition: auth_common.h:584
uint drop_role_priv_idx() override
Definition: auth_common.h:678
uint user_attributes_idx() override
Definition: auth_common.h:686
uint lock_tables_priv_idx() override
Definition: auth_common.h:619
uint create_tmp_table_priv_idx() override
Definition: auth_common.h:616
uint password_lifetime_idx() override
Definition: auth_common.h:675
uint process_priv_idx() override
Definition: auth_common.h:606
uint create_view_priv_idx() override
Definition: auth_common.h:629
uint plugin_idx() override
Definition: auth_common.h:663
uint max_user_connections_idx() override
Definition: auth_common.h:660
uint select_priv_idx() override
Definition: auth_common.h:596
uint references_priv_idx() override
Definition: auth_common.h:609
uint grant_priv_idx() override
Definition: auth_common.h:608
uint repl_slave_priv_idx() override
Definition: auth_common.h:623
uint max_updates_idx() override
Definition: auth_common.h:656
uint delete_priv_idx() override
Definition: auth_common.h:599
uint create_user_priv_idx() override
Definition: auth_common.h:641
uint repl_client_priv_idx() override
Definition: auth_common.h:626
uint show_view_priv_idx() override
Definition: auth_common.h:632
uint password_reuse_history_idx() override
Definition: auth_common.h:679
uint update_priv_idx() override
Definition: auth_common.h:598
uint create_priv_idx() override
Definition: auth_common.h:600
uint max_questions_idx() override
Definition: auth_common.h:653
uint drop_priv_idx() override
Definition: auth_common.h:601
uint alter_priv_idx() override
Definition: auth_common.h:613
uint execute_priv_idx() override
Definition: auth_common.h:622
uint password_idx() override
Definition: auth_common.h:595
uint password_expired_idx() override
Definition: auth_common.h:667
uint password_last_changed_idx() override
Definition: auth_common.h:672
uint authentication_string_idx() override
Definition: auth_common.h:664
uint show_db_priv_idx() override
Definition: auth_common.h:614
uint create_tablespace_priv_idx() override
Definition: auth_common.h:646
uint password_require_current_idx() override
Definition: auth_common.h:683
uint ssl_type_idx() override
Definition: auth_common.h:649
uint max_connections_idx() override
Definition: auth_common.h:657
uint reload_priv_idx() override
Definition: auth_common.h:602
uint create_role_priv_idx() override
Definition: auth_common.h:677
uint alter_routine_priv_idx() override
Definition: auth_common.h:638
uint create_routine_priv_idx() override
Definition: auth_common.h:635
uint super_priv_idx() override
Definition: auth_common.h:615
uint ssl_cipher_idx() override
Definition: auth_common.h:650
uint trigger_priv_idx() override
Definition: auth_common.h:645
uint event_priv_idx() override
Definition: auth_common.h:644
Definition: auth_common.h:689
virtual ~User_table_schema_factory()=default
virtual User_table_schema * get_user_table_schema(TABLE *table)
Definition: auth_common.h:691
virtual bool is_old_user_table_schema(TABLE *table)
Definition: auth_common.cc:48
Definition: auth_common.h:376
virtual uint user_attributes_idx()=0
virtual uint event_priv_idx()=0
virtual uint update_priv_idx()=0
virtual uint max_connections_idx()=0
virtual uint user_idx()=0
virtual uint select_priv_idx()=0
virtual uint repl_client_priv_idx()=0
virtual uint x509_issuer_idx()=0
virtual uint references_priv_idx()=0
virtual uint alter_priv_idx()=0
virtual uint password_last_changed_idx()=0
virtual uint host_idx()=0
virtual uint trigger_priv_idx()=0
virtual uint show_view_priv_idx()=0
virtual uint process_priv_idx()=0
virtual uint create_tablespace_priv_idx()=0
virtual uint reload_priv_idx()=0
virtual uint drop_priv_idx()=0
virtual uint password_expired_idx()=0
virtual uint max_user_connections_idx()=0
virtual uint max_updates_idx()=0
virtual uint password_reuse_time_idx()=0
virtual uint create_view_priv_idx()=0
virtual uint create_tmp_table_priv_idx()=0
virtual uint ssl_type_idx()=0
virtual uint password_lifetime_idx()=0
virtual uint show_db_priv_idx()=0
virtual uint password_reuse_history_idx()=0
virtual uint create_role_priv_idx()=0
virtual uint create_priv_idx()=0
virtual uint account_locked_idx()=0
virtual uint x509_subject_idx()=0
virtual uint alter_routine_priv_idx()=0
virtual uint super_priv_idx()=0
virtual uint password_require_current_idx()=0
virtual uint repl_slave_priv_idx()=0
virtual uint shutdown_priv_idx()=0
virtual uint lock_tables_priv_idx()=0
virtual uint authentication_string_idx()=0
virtual uint drop_role_priv_idx()=0
virtual uint ssl_cipher_idx()=0
virtual uint create_user_priv_idx()=0
virtual uint password_idx()=0
virtual uint grant_priv_idx()=0
virtual uint plugin_idx()=0
virtual uint index_priv_idx()=0
virtual uint max_questions_idx()=0
virtual uint create_routine_priv_idx()=0
virtual uint execute_priv_idx()=0
virtual uint delete_priv_idx()=0
virtual uint file_priv_idx()=0
virtual uint insert_priv_idx()=0
virtual ~User_table_schema()=default
Definition: sp_head.h:123
PFS_table * create_table(PFS_table_share *share, PFS_thread *opening_thread, const void *identity)
Create instrumentation for a table instance.
Definition: pfs_instr.cc:1308
enum_server_command
A list of all MySQL protocol commands.
Definition: my_command.h:48
Common definition used by mysys, performance schema and server & client.
static constexpr int HOSTNAME_LENGTH
Definition: my_hostname.h:43
Some integer typedefs for easier portability.
unsigned char uchar
Definition: my_inttypes.h:52
uint32_t uint32
Definition: my_inttypes.h:67
Common definition between mysql server & client.
#define USERNAME_LENGTH
Definition: mysql_com.h:69
static char * password
Definition: mysql_secure_installation.cc:58
char * user
Definition: mysqladmin.cc:66
const char * host
Definition: mysqladmin.cc:65
std::string str(const mysqlrouter::ConfigGenerator::Options::Endpoint &ep)
Definition: config_generator.cc:1081
static PFS_engine_table_share_proxy table
Definition: pfs.cc:61
Definition: acl_table_user.cc:80
const std::string mysql
const std::string system_user
const std::string connection_admin
Definition: commit_order_queue.h:34
bool length(const dd::Spatial_reference_system *srs, const Geometry *g1, double *length, bool *null) noexcept
Computes the length of linestrings and multilinestrings.
Definition: length.cc:76
static mysql_service_status_t create(const char *service_names[], reference_caching_channel *out_channel) noexcept
Definition: component.cc:45
const char * table_name
Definition: rules_table_service.cc:56
Cursor end()
A past-the-end Cursor.
Definition: rules_table_service.cc:192
const char * db_name
Definition: rules_table_service.cc:55
Definition: gcs_xcom_synode.h:64
std::conditional_t< !std::is_array< T >::value, std::unique_ptr< T, detail::Deleter< T > >, std::conditional_t< detail::is_unbounded_array_v< T >, std::unique_ptr< T, detail::Array_deleter< std::remove_extent_t< T > > >, void > > unique_ptr
The following is a common type that is returned by all the ut::make_unique (non-aligned) specializati...
Definition: ut0new.h:2439
std::list< T, ut::allocator< T > > list
Specialization of list which uses ut_allocator.
Definition: ut0new.h:2879
role_enum
Definition: sql_admin.h:255
struct rsa_st RSA
Definition: sql_authentication.h:103
Consumer_type
Target types where the rewritten query will be added.
Definition: sql_rewrite.h:38
case opt name
Definition: sslopt-case.h:29
Definition: m_ctype.h:423
The current state of the privilege checking process for the current user, SQL statement and SQL objec...
Definition: table.h:369
State information for internal tables grants.
Definition: table.h:346
Struct to hold information about the table that should be created.
Definition: handler.h:3202
Definition: table.h:2731
The MEM_ROOT is a simple arena, where allocations are carved out of larger blocks.
Definition: my_alloc.h:83
Definition: mysql_lex_string.h:40
Definition: mysql_lex_string.h:35
Definition: auth_common.h:923
virtual bool operator()(Security_context *, Operation)=0
Security_context_policy(const Security_context_policy &)=default
Operation
Definition: auth_common.h:924
@ Precheck
Definition: auth_common.h:924
@ Execute
Definition: auth_common.h:924
Security_context_policy()=default
virtual ~Security_context_policy()=default
Definition: table.h:1406
Definition: auth_common.h:1120
std::string host
Definition: auth_common.h:1122
std::string user
Definition: auth_common.h:1121
unsigned int authentication_factor
Definition: auth_common.h:1124
std::string password
Definition: auth_common.h:1123
Definition: sql_connect.h:70
command
Definition: version_token.cc:280
enum enum_vio_type vio_type(const MYSQL_VIO vio)