File Manager

X7ROOT File Manager

Current Path: /usr/include/mysql/server/private

usr / include / mysql / server / private /

ðŸ“ ..
ðŸ“„ aligned.h(1.11 KB)
ðŸ“„ aria_backup.h(1.51 KB)
ðŸ“„ assume_aligned.h(2.29 KB)
ðŸ“ atomic
ðŸ“„ authors.h(9.9 KB)
ðŸ“„ backup.h(1.66 KB)
ðŸ“„ bounded_queue.h(5.95 KB)
ðŸ“„ client_settings.h(1.89 KB)
ðŸ“„ compat56.h(2.23 KB)
ðŸ“„ config.h(14.23 KB)
ðŸ“„ contributors.h(4.76 KB)
ðŸ“„ create_options.h(4.42 KB)
ðŸ“„ create_tmp_table.h(2.74 KB)
ðŸ“„ cset_narrowing.h(3.88 KB)
ðŸ“„ custom_conf.h(1.06 KB)
ðŸ“„ datadict.h(1.66 KB)
ðŸ“„ ddl_log.h(12.39 KB)
ðŸ“„ debug.h(1.21 KB)
ðŸ“„ debug_sync.h(2 KB)
ðŸ“„ derived_handler.h(2.32 KB)
ðŸ“„ derror.h(980 B)
ðŸ“„ des_key_file.h(1.21 KB)
ðŸ“„ discover.h(1.53 KB)
ðŸ“„ dur_prop.h(1.06 KB)
ðŸ“„ embedded_priv.h(1.69 KB)
ðŸ“„ event_data_objects.h(4.09 KB)
ðŸ“„ event_db_repository.h(3.56 KB)
ðŸ“„ event_parse_data.h(2.83 KB)
ðŸ“„ event_queue.h(3.36 KB)
ðŸ“„ event_scheduler.h(3.21 KB)
ðŸ“„ events.h(4.59 KB)
ðŸ“„ field.h(215.25 KB)
ðŸ“„ field_comp.h(1.15 KB)
ðŸ“„ filesort.h(7.11 KB)
ðŸ“„ filesort_utils.h(8 KB)
ðŸ“„ ft_global.h(3.04 KB)
ðŸ“„ gcalc_slicescan.h(16.87 KB)
ðŸ“„ gcalc_tools.h(11.62 KB)
ðŸ“„ grant.h(2.69 KB)
ðŸ“„ group_by_handler.h(3.45 KB)
ðŸ“„ gstream.h(2.38 KB)
ðŸ“„ ha_handler_stats.h(2.28 KB)
ðŸ“„ ha_partition.h(62.9 KB)
ðŸ“„ ha_sequence.h(6.1 KB)
ðŸ“„ handle_connections_win.h(884 B)
ðŸ“„ handler.h(196.46 KB)
ðŸ“„ hash.h(4.34 KB)
ðŸ“„ hash_filo.h(5.55 KB)
ðŸ“„ heap.h(9.26 KB)
ðŸ“„ hostname.h(5.29 KB)
ðŸ“„ ilist.h(6.88 KB)
ðŸ“„ init.h(852 B)
ðŸ“„ innodb_priv.h(1.29 KB)
ðŸ“„ item.h(272.64 KB)
ðŸ“„ item_cmpfunc.h(131.86 KB)
ðŸ“„ item_create.h(11.23 KB)
ðŸ“„ item_func.h(133.45 KB)
ðŸ“„ item_geofunc.h(37.99 KB)
ðŸ“„ item_jsonfunc.h(21.99 KB)
ðŸ“„ item_row.h(5.1 KB)
ðŸ“„ item_strfunc.h(70.55 KB)
ðŸ“„ item_subselect.h(57.77 KB)
ðŸ“„ item_sum.h(70.59 KB)
ðŸ“„ item_timefunc.h(63.1 KB)
ðŸ“„ item_vers.h(4.23 KB)
ðŸ“„ item_windowfunc.h(33.51 KB)
ðŸ“„ item_xmlfunc.h(4.5 KB)
ðŸ“„ json_table.h(9.28 KB)
ðŸ“„ key.h(2.08 KB)
ðŸ“„ keycaches.h(1.95 KB)
ðŸ“„ lex.h(29.13 KB)
ðŸ“„ lex_string.h(3.97 KB)
ðŸ“„ lex_symbol.h(1.29 KB)
ðŸ“„ lf.h(6.31 KB)
ðŸ“„ lock.h(2.15 KB)
ðŸ“„ log.h(45 KB)
ðŸ“„ log_event.h(182.04 KB)
ðŸ“„ log_event_data_type.h(1.85 KB)
ðŸ“„ log_event_old.h(19.37 KB)
ðŸ“„ log_slow.h(2.38 KB)
ðŸ“„ maria.h(5.73 KB)
ðŸ“„ mariadb.h(1.25 KB)
ðŸ“„ mdl.h(37.57 KB)
ðŸ“„ mem_root_array.h(6.94 KB)
ðŸ“„ message.h(1.17 KB)
ðŸ“„ multi_range_read.h(22.64 KB)
ðŸ“„ my_alarm.h(2.37 KB)
ðŸ“„ my_apc.h(4.64 KB)
ðŸ“„ my_atomic.h(7.11 KB)
ðŸ“„ my_atomic_wrapper.h(2.98 KB)
ðŸ“„ my_base.h(26.57 KB)
ðŸ“„ my_bit.h(6.05 KB)
ðŸ“„ my_bitmap.h(5.74 KB)
ðŸ“„ my_check_opt.h(2.56 KB)
ðŸ“„ my_compare.h(10.93 KB)
ðŸ“„ my_counter.h(1.68 KB)
ðŸ“„ my_cpu.h(4.74 KB)
ðŸ“„ my_crypt.h(904 B)
ðŸ“„ my_decimal.h(14.15 KB)
ðŸ“„ my_default.h(1.84 KB)
ðŸ“„ my_handler_errors.h(4.77 KB)
ðŸ“„ my_json_writer.h(17.95 KB)
ðŸ“„ my_libwrap.h(1.16 KB)
ðŸ“„ my_md5.h(1.45 KB)
ðŸ“„ my_minidump.h(848 B)
ðŸ“„ my_nosys.h(1.4 KB)
ðŸ“„ my_rdtsc.h(8.23 KB)
ðŸ“„ my_rnd.h(1.04 KB)
ðŸ“„ my_service_manager.h(2 KB)
ðŸ“„ my_stack_alloc.h(6.34 KB)
ðŸ“„ my_stacktrace.h(3.14 KB)
ðŸ“„ my_time.h(10.22 KB)
ðŸ“„ my_tree.h(3.9 KB)
ðŸ“„ my_uctype.h(67.9 KB)
ðŸ“„ my_user.h(1.1 KB)
ðŸ“„ myisam.h(17.1 KB)
ðŸ“„ myisamchk.h(4.61 KB)
ðŸ“„ myisammrg.h(4.78 KB)
ðŸ“„ myisampack.h(14.58 KB)
ðŸ“„ mysqld.h(39.55 KB)
ðŸ“„ mysqld_default_groups.h(204 B)
ðŸ“„ mysqld_suffix.h(1.17 KB)
ðŸ“„ mysys_err.h(2.95 KB)
ðŸ“„ opt_range.h(58.19 KB)
ðŸ“„ opt_subselect.h(14.21 KB)
ðŸ“„ opt_trace.h(8.29 KB)
ðŸ“„ opt_trace_context.h(3.21 KB)
ðŸ“„ parse_file.h(4.28 KB)
ðŸ“„ partition_element.h(5.09 KB)
ðŸ“„ partition_info.h(18.85 KB)
ðŸ“„ password.h(1.14 KB)
ðŸ“„ pfs_file_provider.h(3.08 KB)
ðŸ“„ pfs_idle_provider.h(1.35 KB)
ðŸ“„ pfs_memory_provider.h(1.59 KB)
ðŸ“„ pfs_metadata_provider.h(1.85 KB)
ðŸ“„ pfs_socket_provider.h(2.21 KB)
ðŸ“„ pfs_stage_provider.h(1.52 KB)
ðŸ“„ pfs_statement_provider.h(4.25 KB)
ðŸ“„ pfs_table_provider.h(2.56 KB)
ðŸ“„ pfs_thread_provider.h(5.43 KB)
ðŸ“„ pfs_transaction_provider.h(2.78 KB)
ðŸ“„ privilege.h(27.97 KB)
ðŸ“„ probes_mysql.h(973 B)
ðŸ“„ probes_mysql_dtrace.h(32.23 KB)
ðŸ“„ probes_mysql_nodtrace.h(4.89 KB)
ðŸ“„ procedure.h(6.63 KB)
ðŸ“„ protocol.h(12.2 KB)
ðŸ“„ proxy_protocol.h(548 B)
ðŸ“„ queues.h(3.4 KB)
ðŸ“„ records.h(3.07 KB)
ðŸ“„ repl_failsafe.h(1.55 KB)
ðŸ“„ replication.h(15.73 KB)
ðŸ“„ rijndael.h(1.67 KB)
ðŸ“„ rowid_filter.h(15.11 KB)
ðŸ“„ rpl_constants.h(3.28 KB)
ðŸ“„ rpl_filter.h(4.43 KB)
ðŸ“„ rpl_gtid.h(13.36 KB)
ðŸ“„ rpl_injector.h(9.4 KB)
ðŸ“„ rpl_mi.h(14.64 KB)
ðŸ“„ rpl_parallel.h(17.05 KB)
ðŸ“„ rpl_record.h(1.55 KB)
ðŸ“„ rpl_record_old.h(1.37 KB)
ðŸ“„ rpl_reporting.h(3.63 KB)
ðŸ“„ rpl_rli.h(31.98 KB)
ðŸ“„ rpl_tblmap.h(3.1 KB)
ðŸ“„ rpl_utility.h(9.4 KB)
ðŸ“„ scheduler.h(3.12 KB)
ðŸ“„ scope.h(4.29 KB)
ðŸ“„ select_handler.h(2.18 KB)
ðŸ“„ semisync.h(2.23 KB)
ðŸ“„ semisync_master.h(24.96 KB)
ðŸ“„ semisync_master_ack_receiver.h(8.5 KB)
ðŸ“„ semisync_slave.h(3.65 KB)
ðŸ“„ service_versions.h(2 KB)
ðŸ“„ session_tracker.h(13.94 KB)
ðŸ“„ set_var.h(16.16 KB)
ðŸ“„ slave.h(11.99 KB)
ðŸ“„ socketpair.h(842 B)
ðŸ“„ source_revision.h(67 B)
ðŸ“„ sp.h(22.06 KB)
ðŸ“„ sp_cache.h(2 KB)
ðŸ“„ sp_head.h(63 KB)
ðŸ“„ sp_pcontext.h(24.31 KB)
ðŸ“„ sp_rcontext.h(14 KB)
ðŸ“„ span.h(3.84 KB)
ðŸ“„ spatial.h(21.78 KB)
ðŸ“„ sql_acl.h(13.8 KB)
ðŸ“„ sql_admin.h(2.85 KB)
ðŸ“„ sql_alloc.h(1.69 KB)
ðŸ“„ sql_alter.h(14.92 KB)
ðŸ“„ sql_analyse.h(10.86 KB)
ðŸ“„ sql_analyze_stmt.h(12.38 KB)
ðŸ“„ sql_array.h(6.71 KB)
ðŸ“„ sql_audit.h(13.62 KB)
ðŸ“„ sql_base.h(25.27 KB)
ðŸ“„ sql_basic_types.h(9.3 KB)
ðŸ“„ sql_binlog.h(895 B)
ðŸ“„ sql_bitmap.h(7.66 KB)
ðŸ“„ sql_bootstrap.h(1.77 KB)
ðŸ“„ sql_cache.h(21.17 KB)
ðŸ“„ sql_callback.h(1.51 KB)
ðŸ“„ sql_class.h(261.11 KB)
ðŸ“„ sql_cmd.h(9.2 KB)
ðŸ“„ sql_connect.h(3.99 KB)
ðŸ“„ sql_const.h(10.96 KB)
ðŸ“„ sql_crypt.h(1.4 KB)
ðŸ“„ sql_cte.h(16.15 KB)
ðŸ“„ sql_cursor.h(2.26 KB)
ðŸ“„ sql_db.h(2.38 KB)
ðŸ“„ sql_debug.h(5.51 KB)
ðŸ“„ sql_delete.h(1.31 KB)
ðŸ“„ sql_derived.h(1.26 KB)
ðŸ“„ sql_digest.h(3.73 KB)
ðŸ“„ sql_digest_stream.h(1.53 KB)
ðŸ“„ sql_do.h(954 B)
ðŸ“„ sql_error.h(38.66 KB)
ðŸ“„ sql_explain.h(28.34 KB)
ðŸ“„ sql_expression_cache.h(4.26 KB)
ðŸ“„ sql_get_diagnostics.h(7.68 KB)
ðŸ“„ sql_handler.h(2.84 KB)
ðŸ“„ sql_help.h(995 B)
ðŸ“„ sql_hset.h(3.32 KB)
ðŸ“„ sql_i_s.h(8.04 KB)
ðŸ“„ sql_insert.h(2.59 KB)
ðŸ“„ sql_join_cache.h(47.53 KB)
ðŸ“„ sql_lex.h(168.5 KB)
ðŸ“„ sql_lifo_buffer.h(9.45 KB)
ðŸ“„ sql_limit.h(3.11 KB)
ðŸ“„ sql_list.h(21.93 KB)
ðŸ“„ sql_load.h(1.25 KB)
ðŸ“„ sql_locale.h(2.64 KB)
ðŸ“„ sql_manager.h(960 B)
ðŸ“„ sql_mode.h(6.58 KB)
ðŸ“„ sql_parse.h(8.43 KB)
ðŸ“„ sql_partition.h(11.79 KB)
ðŸ“„ sql_partition_admin.h(5.8 KB)
ðŸ“„ sql_plist.h(7.55 KB)
ðŸ“„ sql_plugin.h(7.37 KB)
ðŸ“„ sql_plugin_compat.h(2.18 KB)
ðŸ“„ sql_prepare.h(11.14 KB)
ðŸ“„ sql_priv.h(18.16 KB)
ðŸ“„ sql_profile.h(7.63 KB)
ðŸ“„ sql_reload.h(1.01 KB)
ðŸ“„ sql_rename.h(982 B)
ðŸ“„ sql_repl.h(2.97 KB)
ðŸ“„ sql_schema.h(3.23 KB)
ðŸ“„ sql_select.h(86.81 KB)
ðŸ“„ sql_sequence.h(5.06 KB)
ðŸ“„ sql_servers.h(1.74 KB)
ðŸ“„ sql_show.h(9.39 KB)
ðŸ“„ sql_signal.h(3.28 KB)
ðŸ“„ sql_sort.h(21.45 KB)
ðŸ“„ sql_statistics.h(12.16 KB)
ðŸ“„ sql_string.h(38.84 KB)
ðŸ“„ sql_table.h(9.39 KB)
ðŸ“„ sql_tablespace.h(956 B)
ðŸ“„ sql_test.h(1.55 KB)
ðŸ“„ sql_time.h(8.18 KB)
ðŸ“„ sql_trigger.h(12.04 KB)
ðŸ“„ sql_truncate.h(2.03 KB)
ðŸ“„ sql_tvc.h(2.36 KB)
ðŸ“„ sql_type.h(288.51 KB)
ðŸ“„ sql_type_fixedbin.h(62.81 KB)
ðŸ“„ sql_type_fixedbin_storage.h(5.34 KB)
ðŸ“„ sql_type_geom.h(18.64 KB)
ðŸ“„ sql_type_int.h(9.77 KB)
ðŸ“„ sql_type_json.h(6.01 KB)
ðŸ“„ sql_type_real.h(1.23 KB)
ðŸ“„ sql_type_string.h(1.59 KB)
ðŸ“„ sql_udf.h(4.74 KB)
ðŸ“„ sql_union.h(1.04 KB)
ðŸ“„ sql_update.h(1.88 KB)
ðŸ“„ sql_view.h(2.41 KB)
ðŸ“„ sql_window.h(6.65 KB)
ðŸ“„ ssl_compat.h(3.07 KB)
ðŸ“„ strfunc.h(2.22 KB)
ðŸ“„ structs.h(25.76 KB)
ðŸ“„ sys_vars_shared.h(2.67 KB)
ðŸ“„ t_ctype.h(5.51 KB)
ðŸ“„ table.h(113.03 KB)
ðŸ“„ table_cache.h(4.13 KB)
ðŸ“„ thr_alarm.h(2.86 KB)
ðŸ“„ thr_lock.h(7.18 KB)
ðŸ“„ thr_malloc.h(1.17 KB)
ðŸ“„ thr_timer.h(1.53 KB)
ðŸ“„ thread_cache.h(5.77 KB)
ðŸ“„ threadpool.h(4.7 KB)
ðŸ“„ threadpool_generic.h(3.88 KB)
ðŸ“„ threadpool_winsockets.h(2.24 KB)
ðŸ“„ transaction.h(1.43 KB)
ðŸ“„ tzfile.h(4.9 KB)
ðŸ“„ tztime.h(3.32 KB)
ðŸ“„ uniques.h(4.12 KB)
ðŸ“„ unireg.h(7.54 KB)
ðŸ“„ vers_string.h(2.47 KB)
ðŸ“„ violite.h(9.85 KB)
ðŸ“„ waiting_threads.h(4.43 KB)
ðŸ“„ welcome_copyright_notice.h(1.19 KB)
ðŸ“„ win_tzname_data.h(6.35 KB)
ðŸ“„ winservice.h(1.17 KB)
ðŸ“„ wqueue.h(1.53 KB)
ðŸ“„ wsrep.h(3.23 KB)
ðŸ“„ wsrep_applier.h(2.64 KB)
ðŸ“„ wsrep_binlog.h(3.36 KB)
ðŸ“„ wsrep_client_service.h(2.5 KB)
ðŸ“„ wsrep_client_state.h(1.53 KB)
ðŸ“„ wsrep_condition_variable.h(1.45 KB)
ðŸ“„ wsrep_high_priority_service.h(4.8 KB)
ðŸ“„ wsrep_mutex.h(1.19 KB)
ðŸ“„ wsrep_mysqld.h(20.64 KB)
ðŸ“„ wsrep_mysqld_c.h(1.2 KB)
ðŸ“„ wsrep_on.h(1.68 KB)
ðŸ“„ wsrep_priv.h(1.6 KB)
ðŸ“„ wsrep_schema.h(4.83 KB)
ðŸ“„ wsrep_server_service.h(3.55 KB)
ðŸ“„ wsrep_server_state.h(2.23 KB)
ðŸ“„ wsrep_sst.h(3.86 KB)
ðŸ“„ wsrep_storage_service.h(1.77 KB)
ðŸ“„ wsrep_thd.h(10.9 KB)
ðŸ“„ wsrep_trans_observer.h(17.69 KB)
ðŸ“„ wsrep_types.h(997 B)
ðŸ“„ wsrep_utils.h(9.07 KB)
ðŸ“„ wsrep_var.h(4.5 KB)
ðŸ“„ wsrep_xid.h(1.51 KB)
ðŸ“„ xa.h(1.8 KB)

Editing: sql_acl.h

#ifndef SQL_ACL_INCLUDED
#define SQL_ACL_INCLUDED

This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; version 2 of the License.

This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

You should have received a copy of the GNU General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1335  USA */

#include "violite.h"                            /* SSL_type */
#include "sql_class.h"                          /* LEX_COLUMN */
#include "grant.h"
#include "sql_cmd.h"                            /* Sql_cmd */

enum mysql_db_table_field
{
  MYSQL_DB_FIELD_HOST = 0,
  MYSQL_DB_FIELD_DB,
  MYSQL_DB_FIELD_USER,
  MYSQL_DB_FIELD_SELECT_PRIV,
  MYSQL_DB_FIELD_INSERT_PRIV,
  MYSQL_DB_FIELD_UPDATE_PRIV,
  MYSQL_DB_FIELD_DELETE_PRIV,
  MYSQL_DB_FIELD_CREATE_PRIV,
  MYSQL_DB_FIELD_DROP_PRIV,
  MYSQL_DB_FIELD_GRANT_PRIV,
  MYSQL_DB_FIELD_REFERENCES_PRIV,
  MYSQL_DB_FIELD_INDEX_PRIV,
  MYSQL_DB_FIELD_ALTER_PRIV,
  MYSQL_DB_FIELD_CREATE_TMP_TABLE_PRIV,
  MYSQL_DB_FIELD_LOCK_TABLES_PRIV,
  MYSQL_DB_FIELD_CREATE_VIEW_PRIV,
  MYSQL_DB_FIELD_SHOW_VIEW_PRIV,
  MYSQL_DB_FIELD_CREATE_ROUTINE_PRIV,
  MYSQL_DB_FIELD_ALTER_ROUTINE_PRIV,
  MYSQL_DB_FIELD_EXECUTE_PRIV,
  MYSQL_DB_FIELD_EVENT_PRIV,
  MYSQL_DB_FIELD_TRIGGER_PRIV,
  MYSQL_DB_FIELD_DELETE_VERSIONING_ROWS_PRIV,
  MYSQL_DB_FIELD_COUNT
};

extern const TABLE_FIELD_DEF mysql_db_table_def;
extern bool mysql_user_table_is_in_short_password_format;

extern LEX_CSTRING host_not_specified;
extern LEX_CSTRING current_user;
extern LEX_CSTRING current_role;
extern LEX_CSTRING current_user_and_current_role;

static inline int access_denied_error_code(int passwd_used)
{
#ifdef mysqld_error_find_printf_error_used
  return 0;
#else
  return passwd_used == 2 ? ER_ACCESS_DENIED_NO_PASSWORD_ERROR
                          : ER_ACCESS_DENIED_ERROR;
#endif
}

/* prototypes */

bool hostname_requires_resolving(const char *hostname);
bool  acl_init(bool dont_read_acl_tables);
bool acl_reload(THD *thd);
void acl_free(bool end=0);
privilege_t acl_get(const char *host, const char *ip,
                    const char *user, const char *db, my_bool db_is_pattern);
bool acl_authenticate(THD *thd, uint com_change_user_pkt_len);
bool acl_getroot(Security_context *sctx, const char *user, const char *host,
                 const char *ip, const char *db);
bool acl_check_host(const char *host, const char *ip);
bool check_change_password(THD *thd, LEX_USER *user);
bool change_password(THD *thd, LEX_USER *user);

bool mysql_grant_role(THD *thd, List<LEX_USER> &user_list, bool revoke);
bool mysql_grant(THD *thd, const char *db, List <LEX_USER> &user_list,
                 privilege_t rights, bool revoke, bool is_proxy);
int mysql_table_grant(THD *thd, TABLE_LIST *table, List <LEX_USER> &user_list,
                       List <LEX_COLUMN> &column_list, privilege_t rights,
                       bool revoke);
bool mysql_routine_grant(THD *thd, TABLE_LIST *table, const Sp_handler *sph,
                         List <LEX_USER> &user_list, privilege_t rights,
                         bool revoke, bool write_to_binlog);
bool grant_init();
void grant_free(void);
bool grant_reload(THD *thd);
bool check_grant(THD *thd, privilege_t want_access, TABLE_LIST *tables,
                 bool any_combination_will_do, uint number, bool no_errors);
bool check_grant_column (THD *thd, GRANT_INFO *grant,
                         const char *db_name, const char *table_name,
                         const char *name, size_t length, Security_context *sctx);
bool check_column_grant_in_table_ref(THD *thd, TABLE_LIST * table_ref,
                                     const char *name, size_t length, Field *fld);
bool check_grant_all_columns(THD *thd, privilege_t want_access,
                             Field_iterator_table_ref *fields);
bool check_grant_routine(THD *thd, privilege_t want_access,
                         TABLE_LIST *procs, const Sp_handler *sph,
                         bool no_error);
bool check_grant_db(THD *thd,const char *db);
bool check_global_access(THD *thd, const privilege_t want_access, bool no_errors= false);
bool check_access(THD *thd, privilege_t want_access,
                  const char *db, privilege_t *save_priv,
                  GRANT_INTERNAL_INFO *grant_internal_info,
                  bool dont_check_global_grants, bool no_errors);
privilege_t get_table_grant(THD *thd, TABLE_LIST *table);
privilege_t get_column_grant(THD *thd, GRANT_INFO *grant,
                             const char *db_name, const char *table_name,
                             const char *field_name);
bool get_show_user(THD *thd, LEX_USER *lex_user, const char **username,
                   const char **hostname, const char **rolename);
void mysql_show_grants_get_fields(THD *thd, List<Item> *fields,
                                  const char *name, size_t length);
bool mysql_show_grants(THD *thd, LEX_USER *user);
bool mysql_show_create_user(THD *thd, LEX_USER *user);
int fill_schema_enabled_roles(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_applicable_roles(THD *thd, TABLE_LIST *tables, COND *cond);
void get_privilege_desc(char *to, uint max_length, privilege_t access);
void get_mqh(const char *user, const char *host, USER_CONN *uc);
bool mysql_create_user(THD *thd, List <LEX_USER> &list, bool handle_as_role);
bool mysql_drop_user(THD *thd, List <LEX_USER> &list, bool handle_as_role);
bool mysql_rename_user(THD *thd, List <LEX_USER> &list);
int mysql_alter_user(THD *thd, List <LEX_USER> &list);
bool mysql_revoke_all(THD *thd, List <LEX_USER> &list);
void fill_effective_table_privileges(THD *thd, GRANT_INFO *grant,
                                     const char *db, const char *table);
bool sp_revoke_privileges(THD *thd, const char *sp_db, const char *sp_name,
                          const Sp_handler *sph);
bool sp_grant_privileges(THD *thd, const char *sp_db, const char *sp_name,
                         const Sp_handler *sph);
bool check_routine_level_acl(THD *thd, const char *db, const char *name,
                             const Sp_handler *sph);
bool is_acl_user(const char *host, const char *user);
int fill_schema_user_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_schema_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_table_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_column_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int wild_case_compare(CHARSET_INFO *cs, const char *str,const char *wildstr);

/**
  Result of an access check for an internal schema or table.
  Internal ACL checks are always performed *before* using
  the grant tables.
  This mechanism enforces that the server implementation has full
  control on its internal tables.
  Depending on the internal check result, the server implementation
  can choose to:
  - always allow access,
  - always deny access,
  - delegate the decision to the database administrator,
  by using the grant tables.
*/
enum ACL_internal_access_result
{
  /**
    Access granted for all the requested privileges,
    do not use the grant tables.
  */
  ACL_INTERNAL_ACCESS_GRANTED,
  /** Access denied, do not use the grant tables. */
  ACL_INTERNAL_ACCESS_DENIED,
  /** No decision yet, use the grant tables. */
  ACL_INTERNAL_ACCESS_CHECK_GRANT
};

/**
  Per internal table ACL access rules.
  This class is an interface.
  Per table(s) specific access rule should be implemented in a subclass.
  @sa ACL_internal_schema_access
*/
class ACL_internal_table_access
{
public:
  ACL_internal_table_access() = default;

virtual ~ACL_internal_table_access() = default;

/**
    Check access to an internal table.
    When a privilege is granted, this method add the requested privilege
    to save_priv.
    @param want_access the privileges requested
    @param [in, out] save_priv the privileges granted
    @return
      @retval ACL_INTERNAL_ACCESS_GRANTED All the requested privileges
      are granted, and saved in save_priv.
      @retval ACL_INTERNAL_ACCESS_DENIED At least one of the requested
      privileges was denied.
      @retval ACL_INTERNAL_ACCESS_CHECK_GRANT No requested privilege
      was denied, and grant should be checked for at least one
      privilege. Requested privileges that are granted, if any, are saved
      in save_priv.
  */
  virtual ACL_internal_access_result check(privilege_t want_access,
            privilege_t *save_priv, bool any_combination_will_do) const= 0;
};

/**
  Per internal schema ACL access rules.
  This class is an interface.
  Each per schema specific access rule should be implemented
  in a different subclass, and registered.
  Per schema access rules can control:
  - every schema privileges on schema.*
  - every table privileges on schema.table
  @sa ACL_internal_schema_registry
*/
class ACL_internal_schema_access
{
public:
  ACL_internal_schema_access() = default;

virtual ~ACL_internal_schema_access() = default;

/**
    Check access to an internal schema.
    @param want_access the privileges requested
    @param [in, out] save_priv the privileges granted
    @return
      @retval ACL_INTERNAL_ACCESS_GRANTED All the requested privileges
      are granted, and saved in save_priv.
      @retval ACL_INTERNAL_ACCESS_DENIED At least one of the requested
      privileges was denied.
      @retval ACL_INTERNAL_ACCESS_CHECK_GRANT No requested privilege
      was denied, and grant should be checked for at least one
      privilege. Requested privileges that are granted, if any, are saved
      in save_priv.
  */
  virtual ACL_internal_access_result check(privilege_t want_access,
                                           privilege_t *save_priv) const= 0;

/**
    Search for per table ACL access rules by table name.
    @param name the table name
    @return per table access rules, or NULL
  */
  virtual const ACL_internal_table_access *lookup(const char *name) const= 0;
};

/**
  A registry for per internal schema ACL.
  An 'internal schema' is a database schema maintained by the
  server implementation, such as 'performance_schema' and 'INFORMATION_SCHEMA'.
*/
class ACL_internal_schema_registry
{
public:
  static void register_schema(const LEX_CSTRING *name,
                              const ACL_internal_schema_access *access);
  static const ACL_internal_schema_access *lookup(const char *name);
};

const ACL_internal_schema_access *
get_cached_schema_access(GRANT_INTERNAL_INFO *grant_internal_info,
                         const char *schema_name);

const ACL_internal_table_access *
get_cached_table_access(GRANT_INTERNAL_INFO *grant_internal_info,
                        const char *schema_name,
                        const char *table_name);

bool acl_check_proxy_grant_access (THD *thd, const char *host, const char *user,
                                   bool with_grant);
int acl_setrole(THD *thd, const char *rolename, privilege_t access);
int acl_check_setrole(THD *thd, const char *rolename, privilege_t *access);
int acl_check_set_default_role(THD *thd, const char *host, const char *user,
                               const char *role);
int acl_set_default_role(THD *thd, const char *host, const char *user,
                         const char *rolename);

extern SHOW_VAR acl_statistics[];

/* Check if a role is granted to a user/role.

If hostname == NULL, search for a role as the starting grantee.
*/
bool check_role_is_granted(const char *username,
                           const char *hostname,
                           const char *rolename);

#ifndef DBUG_OFF
extern ulong role_global_merges, role_db_merges, role_table_merges,
             role_column_merges, role_routine_merges;
#endif

class Sql_cmd_grant: public Sql_cmd
{
protected:
  enum_sql_command m_command;
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  void warn_hostname_requires_resolving(THD *thd, List<LEX_USER> &list);
  bool user_list_reset_mqh(THD *thd, List<LEX_USER> &list);
  void grant_stage0(THD *thd);
#endif
public:
  Sql_cmd_grant(enum_sql_command command)
   :m_command(command)
  { }
  bool is_revoke() const { return m_command == SQLCOM_REVOKE; }
  enum_sql_command sql_command_code() const override { return m_command; }
};

class Sql_cmd_grant_proxy: public Sql_cmd_grant
{
  privilege_t m_grant_option;
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  bool check_access_proxy(THD *thd, List<LEX_USER> &list);
#endif
public:
  Sql_cmd_grant_proxy(enum_sql_command command, privilege_t grant_option)
   :Sql_cmd_grant(command), m_grant_option(grant_option)
  { }
  bool execute(THD *thd) override;
};

class Sql_cmd_grant_object: public Sql_cmd_grant, public Grant_privilege
{
protected:
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  bool grant_stage0_exact_object(THD *thd, TABLE_LIST *table);
#endif
public:
  Sql_cmd_grant_object(enum_sql_command command, const Grant_privilege &grant)
   :Sql_cmd_grant(command), Grant_privilege(grant)
  { }
};

class Sql_cmd_grant_table: public Sql_cmd_grant_object
{
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  bool execute_table_mask(THD *thd);
  bool execute_exact_table(THD *thd, TABLE_LIST *table);
#endif
public:
  Sql_cmd_grant_table(enum_sql_command command, const Grant_privilege &grant)
   :Sql_cmd_grant_object(command, grant)
  { }
  bool execute(THD *thd) override;
};

class Sql_cmd_grant_sp: public Sql_cmd_grant_object
{
  const Sp_handler &m_sph;
public:
  Sql_cmd_grant_sp(enum_sql_command command, const Grant_privilege &grant,
                   const Sp_handler &sph)
   :Sql_cmd_grant_object(command, grant),
    m_sph(sph)
  { }
  bool execute(THD *thd) override;
};

#endif /* SQL_ACL_INCLUDED */

X7ROOT File Manager

Editing: sql_acl.h

Upload File

Create Folder