Skip to content

Grantinee creates users when no user is present for Mysql #17

@JohnBDonner

Description

@JohnBDonner

We've noticed that when a user doesn't exist on a mysql database, when grantinee is run, it will create the user without a password and assign the permissions to it, despite error messages that "no user exists".

To reproduce:

  • have no user in the database
  • set permissions for the nonexistent user
  • run grantinee
  • look in the database: select user, host, authentication_string, password_last_changed from mysql.user;

You should see the previously non-existent user with an empty authentication_string value. If you run SHOW GRANTS FOR 'non_existent_user'@'host' then it will have all permissions defined by the Grantinee file.

Note: this was observed on a Grantinee client when running the dsl, engine and executor directly instead of through the CLI. Perhaps the user creation is prevented in the CLI class

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions