I think "PROCESS privilege" may be more proper than "SUPER privilege".

http://dev.mysql.com/doc/refman/5.0/en/privileges-provided.html


I have fixed also "INNODB_IO_PATTERN".

http://bazaar.launchpad.net/~percona-dev/percona-patches/5.0.84-fix-
bug-352840/revision/55

Thank you.


mysql> select * from INNODB_BUFFER_POOL_CONTENT;
ERROR 1227 (42000): Access denied; you need the PROCESS privilege for this 
operation
mysql> select * from INNODB_IO_PATTERN;
ERROR 1227 (42000): Access denied; you need the PROCESS privilege for this 
operation

** Branch linked: lp:~percona-dev/percona-patches/5.0.84-fix-bug-352840

** Changed in: percona-patches
       Status: Confirmed => Fix Committed

-- 
INNODB_BUFFER_POOL_CONTENT privacy issue
https://bugs.launchpad.net/bugs/352840
You received this bug notification because you are a member of OurDelta-
developers, which is the registrant for OurDelta.

Status in OurDelta - Builds for MySQL: Confirmed
Status in Patches for MySQL by Percona: Fix Committed

Bug description:
INNODB_BUFFER_POOL_CONTENT does not prune rows returned in terms of what 
databases/tables the requesting user has access to. In many environments it is 
unacceptable for user to have access to data about the names of all database 
and table that exist on the instance.

I suggest that access to INNODB_BUFFER_POOL_CONTENT be restricted to user that 
have the SUPER privilege.

_______________________________________________
Mailing list: https://launchpad.net/~ourdelta-developers
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~ourdelta-developers
More help   : https://help.launchpad.net/ListHelp

Reply via email to