Skip to content
  • Harin Vadodaria's avatar
    33051ec0
    Bug#21516392 : PREVENT ACCOUNT MANAGEMENT STATEMENTS FROM INJECTING ACCOUNT ATTRIBUTES · 33051ec0
    Harin Vadodaria authored
    
    Bug#20535561 : CREATE USER IN BINLOG WITH LOG_BACKWARD_COMPATIBLE_USER_DEFINITIONS ON
    
    Description: 1> When CREATE USER query is logged in binlog, in case of --log_backward_comoatible_user_definition,
                    they are not logged with "IDENTIFIED BY PASSWORD <hash>". Instead, hash of hash is generated.
                 2> In case of ALTER USER, additional attributes are introduced as a part of query rewrite.
    
    Solution: 1> Renamed log-backward-compatible-user-definitions to log-builtin-as-identified-by-password
              2> If above mentioned variable is set, CREATE USER statement involving builtin authentication
                 plugins will be rewritten to include "IDENTIFIED BY PASSWORD" clause. SET PASSWORD will also
                 be rewritten as SET PASSWORD and not ALTER USER ... IDENTIFIED WITH ... AS ...
              3> Corrected problem of appending PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK in case of CREATE/ALTER USER
    
    Reviewed-By: default avatarGeorgi Kodinov <georgi.kodinov@oracle.com>
    Reviewed-By: default avatarBharathy Satish <bharathy.x.satish@oracle.com>
    33051ec0
    Bug#21516392 : PREVENT ACCOUNT MANAGEMENT STATEMENTS FROM INJECTING ACCOUNT ATTRIBUTES
    Harin Vadodaria authored
    
    Bug#20535561 : CREATE USER IN BINLOG WITH LOG_BACKWARD_COMPATIBLE_USER_DEFINITIONS ON
    
    Description: 1> When CREATE USER query is logged in binlog, in case of --log_backward_comoatible_user_definition,
                    they are not logged with "IDENTIFIED BY PASSWORD <hash>". Instead, hash of hash is generated.
                 2> In case of ALTER USER, additional attributes are introduced as a part of query rewrite.
    
    Solution: 1> Renamed log-backward-compatible-user-definitions to log-builtin-as-identified-by-password
              2> If above mentioned variable is set, CREATE USER statement involving builtin authentication
                 plugins will be rewritten to include "IDENTIFIED BY PASSWORD" clause. SET PASSWORD will also
                 be rewritten as SET PASSWORD and not ALTER USER ... IDENTIFIED WITH ... AS ...
              3> Corrected problem of appending PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK in case of CREATE/ALTER USER
    
    Reviewed-By: default avatarGeorgi Kodinov <georgi.kodinov@oracle.com>
    Reviewed-By: default avatarBharathy Satish <bharathy.x.satish@oracle.com>
Loading