[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mysql-developer
Subject:    Authentication
From:       Michael Widenius <monty () mysql ! com>
Date:       2000-09-20 1:40:29
[Download RAW message or body]


Hi!

>>>>> "Matt" == Matt Barringer <matt@wirex.com> writes:

Matt> Where, in the source code, is table authentication performed?  I've looked
Matt> at check_access in sql_parse.cc, but couldn't figure out exactly how it
Matt> works.

Matt> Thanks.

Matt> -- 
Matt> Matt Barringer
Matt> Adversary
Matt> WireX, Inc.

Everything is in sql_parse.cc, sql_acl.cc and sql_base.cc

sql_acl.cc loads all database rights into the server on startup.

global and database rights are stored in the thd->structure and
updated whenever the user changes the active database.

Most other checking is done by check_access() or the
check_table_access() function.

The idea is to check if the global and database rights are enough for
the query. If the above rights is not enough and there exists some
table or column rights the last checking (on column level) will be
done in the sql_base.cc:insert_fields() function.

Hope the above helps!

Regards,
Monty





---------------------------------------------------------------------
Please check "http://www.mysql.com/Manual_chapter/manual_toc.html" before
posting. To request this thread, e-mail developer-thread1627@lists.mysql.com

To unsubscribe, send a message to the address shown in the
List-Unsubscribe header of this message. If you cannot see it,
e-mail developer-unsubscribe@lists.mysql.com instead.

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic