Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Grantinee creates users when no user is present for Mysql #17

Open
JohnBDonner opened this issue Jun 18, 2018 · 0 comments
Open

Grantinee creates users when no user is present for Mysql #17

JohnBDonner opened this issue Jun 18, 2018 · 0 comments
Labels
bug Something isn't working

Comments

@JohnBDonner
Copy link
Contributor

We've noticed that when a user doesn't exist on a mysql database, when grantinee is run, it will create the user without a password and assign the permissions to it, despite error messages that "no user exists".

To reproduce:

  • have no user in the database
  • set permissions for the nonexistent user
  • run grantinee
  • look in the database: select user, host, authentication_string, password_last_changed from mysql.user;

You should see the previously non-existent user with an empty authentication_string value. If you run SHOW GRANTS FOR 'non_existent_user'@'host' then it will have all permissions defined by the Grantinee file.

Note: this was observed on a Grantinee client when running the dsl, engine and executor directly instead of through the CLI. Perhaps the user creation is prevented in the CLI class

@JohnBDonner JohnBDonner added the bug Something isn't working label Jun 18, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant