libraries/check_user_privileges.lib.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  * Get user's global privileges and some db-specific privileges
   5  * ($controllink and $userlink are links to MySQL defined in the "common.inc.php" library)
   6  * Note: if no controluser is defined, $controllink contains $userlink
   7  *
   8  * @version $Id$
   9  */
  10
  11 /**
  12  *
  13  */
  14 $is_create_db_priv  = false;
  15 $is_process_priv = true;
  16 $is_reload_priv  = false;
  17 $db_to_create    = '';
  18 $dbs_where_create_table_allowed = array();
  19
  20 // We were trying to find if user if superuser with 'USE mysql'
  21 // but users with the global priv CREATE TEMPORARY TABLES or LOCK TABLES
  22 // can do a 'USE mysql' (even if they cannot see the tables)
  23 $is_superuser    = PMA_isSuperuser();
  24
  25 function PMA_analyseShowGrant($rs_usr, &$is_create_db_priv, &$db_to_create, &$is_reload_priv, &$dbs_where_create_table_allowed) {
  26
  27     $re0 = '(^|(\\\\\\\\)+|[^\])'; // non-escaped wildcards
  28     $re1 = '(^|[^\])(\\\)+'; // escaped wildcards
  29     while ($row = PMA_DBI_fetch_row($rs_usr)) {
  30         $show_grants_dbname = substr($row[0], strpos($row[0], ' ON ') + 4, (strpos($row[0], '.', strpos($row[0], ' ON ')) - strpos($row[0], ' ON ') - 4));
  31         $show_grants_dbname = ereg_replace('^`(.*)`', '\\1',  $show_grants_dbname);
  32         $show_grants_str    = substr($row[0], 6, (strpos($row[0], ' ON ') - 6));
  33         if ($show_grants_str == 'RELOAD') {
  34             $is_reload_priv = true;
  35         }
  36         if (($show_grants_str == 'ALL') || ($show_grants_str == 'ALL PRIVILEGES') || ($show_grants_str == 'CREATE') || strpos($show_grants_str, 'CREATE')) {
  37             if ($show_grants_dbname == '*') {
  38                 // a global CREATE privilege
  39                 $is_create_db_priv = true;
  40                 $is_reload_priv = true;
  41                 $db_to_create   = '';
  42                 $dbs_where_create_table_allowed[] = '*';
  43                 break;
  44             } else {
  45                 // this array may contain wildcards
  46                 $dbs_where_create_table_allowed[] = $show_grants_dbname;
  47
  48                 // before MySQL 4.1.0, we cannot use backquotes around a dbname
  49                 // for the USE command, so the USE will fail if the dbname contains
  50                 // a "-" and we cannot detect if such a db already exists;
  51                 // since 4.1.0, we need to use backquotes if the dbname contains a "-"
  52                 // in a USE command
  53
  54                 if (PMA_MYSQL_INT_VERSION > 40100) {
  55                     $dbname_to_test = PMA_backquote($show_grants_dbname);
  56                 } else {
  57                     $dbname_to_test = $show_grants_dbname;
  58                 }
  59
  60                 if ((ereg($re0 . '%|_', $show_grants_dbname)
  61                  && !ereg('\\\\%|\\\\_', $show_grants_dbname))
  62                  // does this db exist?
  63                  || (!PMA_DBI_try_query('USE ' .  ereg_replace($re1 .'(%|_)', '\\1\\3', $dbname_to_test),  null, PMA_DBI_QUERY_STORE)
  64                    && substr(PMA_DBI_getError(), 1, 4) != 1044)
  65                 ) {
  66                     $db_to_create = ereg_replace($re0 . '%', '\\1...', ereg_replace($re0 . '_', '\\1?', $show_grants_dbname));
  67                     $db_to_create = ereg_replace($re1 . '(%|_)', '\\1\\3', $db_to_create);
  68                     $is_create_db_priv     = true;
  69
  70                     /**
  71                      * @todo collect $db_to_create into an array, to display a
  72                      * drop-down in the "Create new database" dialog
  73                      */
  74                      // we don't break, we want all possible databases
  75                      //break;
  76                 } // end if
  77             } // end elseif
  78         } // end if
  79     } // end while
  80 } // end function
  81
  82 // Detection for some CREATE privilege.
  83
  84 // Since MySQL 4.1.2, we can easily detect current user's grants
  85 // using $userlink (no control user needed)
  86 // and we don't have to try any other method for detection
  87
  88 if (PMA_MYSQL_INT_VERSION >= 40102) {
  89     $rs_usr = PMA_DBI_try_query('SHOW GRANTS', $userlink, PMA_DBI_QUERY_STORE);
  90     if ($rs_usr) {
  91         PMA_analyseShowGrant($rs_usr, $is_create_db_priv, $db_to_create, $is_reload_priv, $dbs_where_create_table_allowed);
  92         PMA_DBI_free_result($rs_usr);
  93         unset($rs_usr);
  94     }
  95 } else {
  96
  97 // Before MySQL 4.1.2, we first try to find a priv in mysql.user. Hopefuly
  98 // the controluser is correctly defined; but here, $controllink could contain
  99 // $userlink so maybe the SELECT will fail
 100
 101     if (!$is_create_db_priv) {
 102         $res                           = PMA_DBI_query('SELECT USER();', null, PMA_DBI_QUERY_STORE);
 103         list($mysql_cur_user_and_host) = PMA_DBI_fetch_row($res);
 104         $mysql_cur_user                = substr($mysql_cur_user_and_host, 0, strrpos($mysql_cur_user_and_host, '@'));
 105
 106         $local_query = 'SELECT Create_priv, Reload_priv FROM mysql.user WHERE ' . PMA_convert_using('User') . ' = ' . PMA_convert_using(PMA_sqlAddslashes($mysql_cur_user), 'quoted') . ' OR ' . PMA_convert_using('User') . ' = ' . PMA_convert_using('', 'quoted') . ';';
 107         $rs_usr      = PMA_DBI_try_query($local_query, $controllink, PMA_DBI_QUERY_STORE); // Debug: or PMA_mysqlDie('', $local_query, false);
 108         if ($rs_usr) {
 109             while ($result_usr = PMA_DBI_fetch_assoc($rs_usr)) {
 110                 if (!$is_create_db_priv) {
 111                     $is_create_db_priv  = ($result_usr['Create_priv'] == 'Y');
 112                 }
 113                 if (!$is_reload_priv) {
 114                     $is_reload_priv  = ($result_usr['Reload_priv'] == 'Y');
 115                 }
 116             } // end while
 117             PMA_DBI_free_result($rs_usr);
 118             unset($rs_usr, $result_usr);
 119             if ($is_create_db_priv) {
 120                 $dbs_where_create_table_allowed[] = '*';
 121             }
 122         } // end if
 123     } // end if
 124
 125     // If the user has Create priv on a inexistant db, show him in the dialog
 126     // the first inexistant db name that we find, in most cases it's probably
 127     // the one he just dropped :)
 128     if (!$is_create_db_priv) {
 129         $local_query = 'SELECT DISTINCT Db FROM mysql.db WHERE ' . PMA_convert_using('Create_priv') . ' = ' . PMA_convert_using('Y', 'quoted') . ' AND (' . PMA_convert_using('User') . ' = ' .PMA_convert_using(PMA_sqlAddslashes($mysql_cur_user), 'quoted') . ' OR ' . PMA_convert_using('User') . ' = ' . PMA_convert_using('', 'quoted') . ');';
 130
 131         $rs_usr      = PMA_DBI_try_query($local_query, $controllink, PMA_DBI_QUERY_STORE);
 132         if ($rs_usr) {
 133             $re0     = '(^|(\\\\\\\\)+|[^\])'; // non-escaped wildcards
 134             $re1     = '(^|[^\])(\\\)+';       // escaped wildcards
 135             while ($row = PMA_DBI_fetch_assoc($rs_usr)) {
 136                 $dbs_where_create_table_allowed[] = $row['Db'];
 137                 if (ereg($re0 . '(%|_)', $row['Db'])
 138                     || (!PMA_DBI_try_query('USE ' . ereg_replace($re1 . '(%|_)', '\\1\\3', $row['Db'])) && substr(PMA_DBI_getError(), 1, 4) != 1044)) {
 139                     $db_to_create   = ereg_replace($re0 . '%', '\\1...', ereg_replace($re0 . '_', '\\1?', $row['Db']));
 140                     $db_to_create   = ereg_replace($re1 . '(%|_)', '\\1\\3', $db_to_create);
 141                     $is_create_db_priv = true;
 142                     break;
 143                 } // end if
 144             } // end while
 145             PMA_DBI_free_result($rs_usr);
 146             unset($rs_usr, $row, $re0, $re1);
 147         } else {
 148             // Finally, let's try to get the user's privileges by using SHOW
 149             // GRANTS...
 150             // Maybe we'll find a little CREATE priv there :)
 151             $rs_usr      = PMA_DBI_try_query('SHOW GRANTS FOR ' . $mysql_cur_user_and_host . ';', $controllink, PMA_DBI_QUERY_STORE);
 152             if (!$rs_usr) {
 153                 // OK, now we'd have to guess the user's hostname, but we
 154                 // only try out the 'username'@'%' case.
 155                 $rs_usr      = PMA_DBI_try_query('SHOW GRANTS FOR ' . PMA_convert_using(PMA_sqlAddslashes($mysql_cur_user), 'quoted') . ';', $controllink, PMA_DBI_QUERY_STORE);
 156             }
 157             unset($local_query);
 158             if ($rs_usr) {
 159                 PMA_analyseShowGrant($rs_usr, $is_create_db_priv, $db_to_create, $is_reload_priv, $dbs_where_create_table_allowed);
 160                 PMA_DBI_free_result($rs_usr);
 161                 unset($rs_usr);
 162             } // end if
 163         } // end elseif
 164     } // end if
 165 } // end else (MySQL < 4.1.2)
 166
 167 // If disabled, don't show it
 168 if (!$cfg['SuggestDBName']) {
 169     $db_to_create = '';
 170 }
 171 ?>