libraries/check_user_privileges.lib.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  * Get user's global privileges and some db-specific privileges
   5  * ($controllink and $userlink are links to MySQL defined in the "common.inc.php" library)
   6  * Note: if no controluser is defined, $controllink contains $userlink
   7  *
   8  * @version $Id$
   9  */
  10
  11 /**
  12  *
  13  */
  14 $is_create_db_priv  = false;
  15 $is_process_priv = true;
  16 $is_reload_priv  = false;
  17 $db_to_create    = '';
  18 $dbs_where_create_table_allowed = array();
  19
  20 // We were trying to find if user if superuser with 'USE mysql'
  21 // but users with the global priv CREATE TEMPORARY TABLES or LOCK TABLES
  22 // can do a 'USE mysql' (even if they cannot see the tables)
  23 $is_superuser    = PMA_isSuperuser();
  24
  25 function PMA_analyseShowGrant($rs_usr, &$is_create_db_priv, &$db_to_create, &$is_reload_priv, &$dbs_where_create_table_allowed) {
  26
  27     $re0 = '(^|(\\\\\\\\)+|[^\])'; // non-escaped wildcards
  28     $re1 = '(^|[^\])(\\\)+'; // escaped wildcards
  29     while ($row = PMA_DBI_fetch_row($rs_usr)) {
  30         $show_grants_dbname = substr($row[0], strpos($row[0], ' ON ') + 4, (strpos($row[0], '.', strpos($row[0], ' ON ')) - strpos($row[0], ' ON ') - 4));
  31         $show_grants_dbname = ereg_replace('^`(.*)`', '\\1',  $show_grants_dbname);
  32         $show_grants_str    = substr($row[0], 6, (strpos($row[0], ' ON ') - 6));
  33         if ($show_grants_str == 'RELOAD') {
  34             $is_reload_priv = true;
  35         }
  36         /**
  37          * @todo if we find CREATE VIEW but not CREATE, do not offer
  38          * the create database dialog box
  39          */
  40         if (($show_grants_str == 'ALL') || ($show_grants_str == 'ALL PRIVILEGES') || ($show_grants_str == 'CREATE') || strpos($show_grants_str, 'CREATE,') !== false) {
  41             if ($show_grants_dbname == '*') {
  42                 // a global CREATE privilege
  43                 $is_create_db_priv = true;
  44                 $is_reload_priv = true;
  45                 $db_to_create   = '';
  46                 $dbs_where_create_table_allowed[] = '*';
  47                 break;
  48             } else {
  49                 // this array may contain wildcards
  50                 $dbs_where_create_table_allowed[] = $show_grants_dbname;
  51
  52                 // before MySQL 4.1.0, we cannot use backquotes around a dbname
  53                 // for the USE command, so the USE will fail if the dbname contains
  54                 // a "-" and we cannot detect if such a db already exists;
  55                 // since 4.1.0, we need to use backquotes if the dbname contains a "-"
  56                 // in a USE command
  57
  58                 if (PMA_MYSQL_INT_VERSION > 40100) {
  59                     $dbname_to_test = PMA_backquote($show_grants_dbname);
  60                 } else {
  61                     $dbname_to_test = $show_grants_dbname;
  62                 }
  63
  64                 if ((ereg($re0 . '%|_', $show_grants_dbname)
  65                  && !ereg('\\\\%|\\\\_', $show_grants_dbname))
  66                  // does this db exist?
  67                  || (!PMA_DBI_try_query('USE ' .  ereg_replace($re1 .'(%|_)', '\\1\\3', $dbname_to_test),  null, PMA_DBI_QUERY_STORE)
  68                    && substr(PMA_DBI_getError(), 1, 4) != 1044)
  69                 ) {
  70                     $db_to_create = ereg_replace($re0 . '%', '\\1...', ereg_replace($re0 . '_', '\\1?', $show_grants_dbname));
  71                     $db_to_create = ereg_replace($re1 . '(%|_)', '\\1\\3', $db_to_create);
  72                     $is_create_db_priv     = true;
  73
  74                     /**
  75                      * @todo collect $db_to_create into an array, to display a
  76                      * drop-down in the "Create new database" dialog
  77                      */
  78                      // we don't break, we want all possible databases
  79                      //break;
  80                 } // end if
  81             } // end elseif
  82         } // end if
  83     } // end while
  84 } // end function
  85
  86 // Detection for some CREATE privilege.
  87
  88 // Since MySQL 4.1.2, we can easily detect current user's grants
  89 // using $userlink (no control user needed)
  90 // and we don't have to try any other method for detection
  91
  92 if (PMA_MYSQL_INT_VERSION >= 40102) {
  93     $rs_usr = PMA_DBI_try_query('SHOW GRANTS', $userlink, PMA_DBI_QUERY_STORE);
  94     if ($rs_usr) {
  95         PMA_analyseShowGrant($rs_usr, $is_create_db_priv, $db_to_create, $is_reload_priv, $dbs_where_create_table_allowed);
  96         PMA_DBI_free_result($rs_usr);
  97         unset($rs_usr);
  98     }
  99 } else {
 100
 101 // Before MySQL 4.1.2, we first try to find a priv in mysql.user. Hopefuly
 102 // the controluser is correctly defined; but here, $controllink could contain
 103 // $userlink so maybe the SELECT will fail
 104
 105     if (!$is_create_db_priv) {
 106         $res                           = PMA_DBI_query('SELECT USER();', null, PMA_DBI_QUERY_STORE);
 107         list($mysql_cur_user_and_host) = PMA_DBI_fetch_row($res);
 108         $mysql_cur_user                = substr($mysql_cur_user_and_host, 0, strrpos($mysql_cur_user_and_host, '@'));
 109
 110         $local_query = 'SELECT Create_priv, Reload_priv FROM mysql.user WHERE ' . PMA_convert_using('User') . ' = ' . PMA_convert_using(PMA_sqlAddslashes($mysql_cur_user), 'quoted') . ' OR ' . PMA_convert_using('User') . ' = ' . PMA_convert_using('', 'quoted') . ';';
 111         $rs_usr      = PMA_DBI_try_query($local_query, $controllink, PMA_DBI_QUERY_STORE); // Debug: or PMA_mysqlDie('', $local_query, false);
 112         if ($rs_usr) {
 113             while ($result_usr = PMA_DBI_fetch_assoc($rs_usr)) {
 114                 if (!$is_create_db_priv) {
 115                     $is_create_db_priv  = ($result_usr['Create_priv'] == 'Y');
 116                 }
 117                 if (!$is_reload_priv) {
 118                     $is_reload_priv  = ($result_usr['Reload_priv'] == 'Y');
 119                 }
 120             } // end while
 121             PMA_DBI_free_result($rs_usr);
 122             unset($rs_usr, $result_usr);
 123             if ($is_create_db_priv) {
 124                 $dbs_where_create_table_allowed[] = '*';
 125             }
 126         } // end if
 127     } // end if
 128
 129     // If the user has Create priv on a inexistant db, show him in the dialog
 130     // the first inexistant db name that we find, in most cases it's probably
 131     // the one he just dropped :)
 132     if (!$is_create_db_priv) {
 133         $local_query = 'SELECT DISTINCT Db FROM mysql.db WHERE ' . PMA_convert_using('Create_priv') . ' = ' . PMA_convert_using('Y', 'quoted') . ' AND (' . PMA_convert_using('User') . ' = ' .PMA_convert_using(PMA_sqlAddslashes($mysql_cur_user), 'quoted') . ' OR ' . PMA_convert_using('User') . ' = ' . PMA_convert_using('', 'quoted') . ');';
 134
 135         $rs_usr      = PMA_DBI_try_query($local_query, $controllink, PMA_DBI_QUERY_STORE);
 136         if ($rs_usr) {
 137             $re0     = '(^|(\\\\\\\\)+|[^\])'; // non-escaped wildcards
 138             $re1     = '(^|[^\])(\\\)+';       // escaped wildcards
 139             while ($row = PMA_DBI_fetch_assoc($rs_usr)) {
 140                 $dbs_where_create_table_allowed[] = $row['Db'];
 141                 if (ereg($re0 . '(%|_)', $row['Db'])
 142                     || (!PMA_DBI_try_query('USE ' . ereg_replace($re1 . '(%|_)', '\\1\\3', $row['Db'])) && substr(PMA_DBI_getError(), 1, 4) != 1044)) {
 143                     $db_to_create   = ereg_replace($re0 . '%', '\\1...', ereg_replace($re0 . '_', '\\1?', $row['Db']));
 144                     $db_to_create   = ereg_replace($re1 . '(%|_)', '\\1\\3', $db_to_create);
 145                     $is_create_db_priv = true;
 146                     break;
 147                 } // end if
 148             } // end while
 149             PMA_DBI_free_result($rs_usr);
 150             unset($rs_usr, $row, $re0, $re1);
 151         } else {
 152             // Finally, let's try to get the user's privileges by using SHOW
 153             // GRANTS...
 154             // Maybe we'll find a little CREATE priv there :)
 155             $rs_usr      = PMA_DBI_try_query('SHOW GRANTS FOR ' . $mysql_cur_user_and_host . ';', $controllink, PMA_DBI_QUERY_STORE);
 156             if (!$rs_usr) {
 157                 // OK, now we'd have to guess the user's hostname, but we
 158                 // only try out the 'username'@'%' case.
 159                 $rs_usr      = PMA_DBI_try_query('SHOW GRANTS FOR ' . PMA_convert_using(PMA_sqlAddslashes($mysql_cur_user), 'quoted') . ';', $controllink, PMA_DBI_QUERY_STORE);
 160             }
 161             unset($local_query);
 162             if ($rs_usr) {
 163                 PMA_analyseShowGrant($rs_usr, $is_create_db_priv, $db_to_create, $is_reload_priv, $dbs_where_create_table_allowed);
 164                 PMA_DBI_free_result($rs_usr);
 165                 unset($rs_usr);
 166             } // end if
 167         } // end elseif
 168     } // end if
 169 } // end else (MySQL < 4.1.2)
 170
 171 // If disabled, don't show it
 172 if (!$cfg['SuggestDBName']) {
 173     $db_to_create = '';
 174 }
 175 ?>