summaryrefslogtreecommitdiffstats
path: root/mysql-test/main/grant_read_only.test
blob: f42bb24fe83301c912664fafa8429bed0245b6dc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
-- source include/not_embedded.inc

--echo #
--echo # Start of 10.5 tests
--echo #

--echo #
--echo # Test that @@read_only is not ignored without READ_ONLY ADMIN or SUPER
--echo #

CREATE TABLE t1 (a INT);
CREATE USER user1@localhost IDENTIFIED BY '';
GRANT ALL PRIVILEGES ON *.* TO user1@localhost;
REVOKE READ_ONLY ADMIN, SUPER ON *.* FROM user1@localhost;
SET @@GLOBAL.read_only=1;

connect (con1,localhost,user1,,);
connection con1;
--error ER_OPTION_PREVENTS_STATEMENT
UPDATE t1 SET a=11 WHERE a=10;
--error ER_OPTION_PREVENTS_STATEMENT
DELETE FROM t1 WHERE a=11;
--error ER_OPTION_PREVENTS_STATEMENT
INSERT INTO t1 VALUES (20);
disconnect con1;

connection default;
SET @@GLOBAL.read_only=0;
DROP USER user1@localhost;
DROP TABLE t1;

--echo #
--echo # Test that @@read_only is ignored with READ_ONLY ADMIN
--echo #

CREATE TABLE t1 (a INT);
CREATE USER user1@localhost IDENTIFIED BY '';
## TODO: it works even without INSERT/UPDATE/DELETE: file a bug report!
GRANT SELECT, INSERT, UPDATE, DELETE, READ_ONLY ADMIN ON *.* TO user1@localhost;
SHOW GRANTS FOR user1@localhost;
SET @@GLOBAL.read_only=1;

connect (con1,localhost,user1,,);
connection con1;
SELECT @@read_only;
UPDATE t1 SET a=11 WHERE a=10;
DELETE FROM t1 WHERE a=11;
INSERT INTO t1 VALUES (20);
disconnect con1;

connection default;
SET @@GLOBAL.read_only=0;
DROP USER user1@localhost;
DROP TABLE t1;


--echo #
--echo # Test that @@read_only is not ignored with SUPER
--echo #

CREATE TABLE t1 (a INT);
CREATE USER user1@localhost IDENTIFIED BY '';
## TODO: it works even without INSERT/UPDATE/DELETE: file a bug report!
GRANT SELECT, INSERT, UPDATE, DELETE, SUPER ON *.* TO user1@localhost;
SHOW GRANTS FOR user1@localhost;
SET @@GLOBAL.read_only=1;

connect (con1,localhost,user1,,);
connection con1;
SELECT @@read_only;
--error ER_OPTION_PREVENTS_STATEMENT
UPDATE t1 SET a=11 WHERE a=10;
--error ER_OPTION_PREVENTS_STATEMENT
DELETE FROM t1 WHERE a=11;
connection default;
grant read only admin on *.* to user1@localhost;
disconnect con1;
connect (con1,localhost,user1,,);
INSERT INTO t1 VALUES (20);
disconnect con1;

connection default;
SET @@GLOBAL.read_only=0;
DROP USER user1@localhost;
DROP TABLE t1;

--echo #
--echo # End of 10.5 tests
--echo #