GIF89a;
Direktori : /usr/share/mysql-test/suite/funcs_1/triggers/ |
Current File : //usr/share/mysql-test/suite/funcs_1/triggers/triggers_03e_table_level.inc |
#====================================================================== # # Trigger Tests # test cases for TRIGGER privilege on db, table and column level #====================================================================== --disable_abort_on_error ########################################### ################ Section 3.5.3 ############ # Check for the db level of Triggers # ########################################### # General setup to be used in all testcases let $message= ######### Testcase for table level: ########; --source include/show_msg.inc --disable_warnings drop database if exists priv_db; --enable_warnings create database priv_db; use priv_db; eval create table t1 (f1 char(20)) engine= $engine_type; create User test_yesprivs@localhost; set password for test_yesprivs@localhost = password('PWD'); revoke ALL PRIVILEGES, GRANT OPTION FROM test_yesprivs@localhost; create User test_noprivs@localhost; set password for test_noprivs@localhost = password('PWD'); revoke ALL PRIVILEGES, GRANT OPTION FROM test_noprivs@localhost; connect (yes_privs,localhost,test_yesprivs,PWD,test,$MASTER_MYPORT,$MASTER_MYSOCK); connect (no_privs,localhost,test_noprivs,PWD,test,$MASTER_MYPORT,$MASTER_MYSOCK); ################ Section 3.5.3 ############ # Check for the table level of Triggers # ########################################### # user has no trigger privilege->create trigger fail let $message= no trigger privilege on table level for create:; --source include/show_msg.inc connection default; select current_user; show triggers; grant select, insert, update on priv_db.t1 to test_yesprivs@localhost; show grants for test_yesprivs@localhost; grant select, update, insert on priv_db.t1 to test_noprivs@localhost; show grants for test_noprivs@localhost; connection yes_privs; select current_user; use priv_db; show tables; --error ER_TABLEACCESS_DENIED_ERROR create trigger trg1_1 before INSERT on t1 for each row set new.f1 = 'trig 1_1-no'; # no trigger execution, as trigger does'nt exist connection no_privs; select current_user; use priv_db; insert into t1 (f1) values ('insert1-yes'); select f1 from t1 order by f1; connection default; select current_user; show triggers; show tables; insert into t1 (f1) values ('insert2-yes'); select f1 from t1 order by f1; grant TRIGGER on priv_db.t1 to test_yesprivs@localhost; show grants for test_yesprivs@localhost; # user got trigger privilege->create trigger successful let $message= trigger privilege on table level for create:; --source include/show_msg.inc connection yes_privs; select current_user; show triggers; create trigger trg1_2 before INSERT on t1 for each row set new.f1 = 'trig 1_2-yes'; # insert now executes the trigger connection no_privs; select current_user; insert into t1 (f1) values ('insert3-no'); select f1 from t1 order by f1; connection default; select current_user; insert into t1 (f1) values ('insert4-no'); select f1 from t1 order by f1; revoke TRIGGER on priv_db.t1 from test_yesprivs@localhost; show grants for test_yesprivs@localhost; # revoke triggerprivilege->drop trigger fail let $message= no trigger privilege on table level for drop:; --source include/show_msg.inc connection yes_privs; select current_user; --error ER_TABLEACCESS_DENIED_ERROR drop trigger trg1_2; # no trigger priv at activation time->insert fails let $message= no trigger privilege at activation time:; --source include/show_msg.inc connection no_privs; select current_user; --error ER_TABLEACCESS_DENIED_ERROR insert into t1 (f1) values ('insert5-no'); select f1 from t1 order by f1; connection default; select current_user; grant TRIGGER on priv_db.t1 to test_yesprivs@localhost; # trigger privilege at activation time->insert with trigger successful let $message= trigger privilege at activation time:; --source include/show_msg.inc connection no_privs; select current_user; insert into t1 (f1) values ('insert6-no'); select f1 from t1 order by f1; # trigger privilege->drop trigger successful let $message= trigger privilege on table level for drop:; --source include/show_msg.inc connection yes_privs; select current_user; show grants for test_yesprivs@localhost; drop trigger trg1_2; # inserts without trigger connection no_privs; select current_user; insert into t1 (f1) values ('insert7-yes'); select f1 from t1 order by f1; connection default; select current_user; insert into t1 (f1) values ('insert8-yes'); select f1 from t1 order by f1; # trigger privilege must be keep when mixinf tables with and without # trigger privilege let $message= switch to table without having trigger priv for it:; --source include/show_msg.inc eval create table t2 (f1 char(20)) engine= $engine_type; # Adding the minimal priv to be able to set to the db grant SELECT, INSERT, UPDATE on priv_db.t2 to test_yesprivs@localhost; show grants for test_yesprivs@localhost; grant SELECT, INSERT, UPDATE on priv_db.t2 to test_noprivs@localhost; show grants for test_noprivs@localhost; let $message= use table with trigger privilege and without...:; --source include/show_msg.inc connection yes_privs; select current_user; --error ER_TABLEACCESS_DENIED_ERROR create trigger trg2_1 before INSERT on t2 for each row set new.f1 = 'trig 2_1-no'; create trigger trg1_3 before INSERT on t1 for each row set new.f1 = 'trig 1_3-yes'; --error ER_TABLEACCESS_DENIED_ERROR create trigger trg2_2 before UPDATE on t2 for each row set new.f1 = 'trig 2_2-no'; create trigger trg1_4 before UPDATE on t1 for each row set new.f1 = 'trig 1_4-yes'; show triggers; connection no_privs; select current_user; insert into t2 (f1) values ('insert9-yes'); select f1 from t2 order by f1; insert into t1 (f1) values ('insert10-no'); select f1 from t1 order by f1; disconnect no_privs; connection yes_privs; select current_user; --error ER_TRG_DOES_NOT_EXIST drop trigger trg2_1; drop trigger trg1_3; --error ER_TRG_DOES_NOT_EXIST drop trigger trg2_2; drop trigger trg1_4; # Cleanup table level --disable_warnings disconnect yes_privs; connection default; select current_user; --enable_warnings # general Cleanup --disable_warnings drop database if exists priv_db; drop user test_yesprivs@localhost; drop user test_noprivs@localhost; --enable_warnings