MySQL 授予无效？

Question

好吧，我很困惑。我在尝试进行更新时遇到“访问被拒绝”错误。有一项授权允许该用户对该表执行更新，但无论如何都被拒绝了。是的，我试过“刷新属性”。

$ mysql -h DBHOST -u DBUSER -p DBNAME
Enter password: ******
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 7340
Server version: 5.0.77 Source distribution

Copyright (c) 2000, 2010, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> update user set lastlogin = now() where userid = 1;
ERROR 1227 (42000): Access denied; you need the SUPER privilege for this operation
mysql> show grants for DBUSER;
+--------------------------------------------------------------------------------------+
| Grants for DBUSER@%                                                                  |
+--------------------------------------------------------------------------------------+
...
| GRANT SELECT, INSERT ON `DBNAME`.`useroldpassword` TO 'DBUSER'@'%'                     |
...
| GRANT SELECT, INSERT, UPDATE ON `DBNAME`.`user` TO 'DBUSER'@'%'                      |
...
+--------------------------------------------------------------------------------------+
68 rows in set (0.01 sec)

mysql>

table 上有个触发器:

CREATE TRIGGER DEFINER=`DEFINER`@`localhost` UserPasswordUpdate BEFORE UPDATE ON User
FOR EACH ROW
BEGIN
    DECLARE count int;
    IF(NOT NEW.Password<=>OLD.Password) THEN
        SELECT count(*) into count FROM UserOldPassword WHERE UserID=NEW.UserID AND Password=NEW.Password;
        IF(count != 0) THEN
             INSERT INTO Unknown VALUES(1);
        END IF;
        INSERT INTO UserOldPassword(UserID,PasswordDate,Password) VALUES(NEW.UserID, NOW(), NEW.Password);
        SET NEW.LastPasswordChangeDate=NOW();
    END IF;
END

执行用户(见上文)和声明的定义者都应该有权插入 UserOldPassword 表:

mysql> show grants for DEFINER;
+---------------------------------------------------------------------------------+
| Grants for DEFINER@%                                                            |
+---------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'DEFINER'@'%' IDENTIFIED BY PASSWORD '...'                |
| GRANT ALL PRIVILEGES ON `DBNAME`.* TO 'DEFINER'@'%'                             |
+---------------------------------------------------------------------------------+
2 rows in set (0.00 sec)

mysql> show grants for DEFINER@localhost;
+-----------------------------------------------------------------------------------------+
| Grants for DEFINER@localhost                                                            |
+-----------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'DEFINER'@'localhost' IDENTIFIED BY PASSWORD '...'                |
| GRANT ALL PRIVILEGES ON `DBNAME`.* TO 'DEFINER'@'localhost'                             |
+-----------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)

Answer 1

尝试:

GRANT SUPER ON `DBNAME`.`user` TO 'DBUSER'@'%'

你可能在 table 上有一个触发器，这就是它不起作用的原因。