Uploaded image for project: 'Percona Server'
  1. Percona Server
  2. PS-3956

access_denied component of userstats doesn't work

    Details

    • Type: Bug
    • Status: Done
    • Priority: Medium
    • Resolution: Fixed
    • Affects Version/s: 5.6.40-84.0, 5.5.60-38.12, 5.7.22-22
    • Fix Version/s: 5.7.25-28, 8.0.15-5, 5.6.44-85.0
    • Component/s: None
    • Environment:

      I suspect this impacts all 5.6 and 5.7 releases.

      Description

      According to the docs, access_denied is supposed to count "The number of times this client's connections issued commands that were denied." I would assume this to include such things as trying to modify a table when connected as a user without insert/update privileges or when trying to write to a server that is set read-only when I don't have the super privilege. However, I've tried both scenarios and the access_denied counter never increments. For example:

      mysql> show grants\G
      *************************** 1. row ***************************
      Grants for testme@%: GRANT SELECT, SHOW DATABASES ON *.* TO 'testme'@'%' IDENTIFIED BY PASSWORD <secret>
      1 row in set (0.00 sec)
      mysql> create database foooo;
      ERROR 1044 (42000): Access denied for user 'testme'@'%' to database 'foooo'

      And then in another session:

      mysql> select * from information_schema.user_statistics where user='testme'\G
      *************************** 1. row ***************************
                        USER: testme
           TOTAL_CONNECTIONS: 1
      CONCURRENT_CONNECTIONS: 0
              CONNECTED_TIME: 241
                   BUSY_TIME: 0
                    CPU_TIME: 0
              BYTES_RECEIVED: 102
                  BYTES_SENT: 0
        BINLOG_BYTES_WRITTEN: 0
                ROWS_FETCHED: 2
                ROWS_UPDATED: 0
             TABLE_ROWS_READ: 0
             SELECT_COMMANDS: 2
             UPDATE_COMMANDS: 1
              OTHER_COMMANDS: 1
         COMMIT_TRANSACTIONS: 0
       ROLLBACK_TRANSACTIONS: 0
          DENIED_CONNECTIONS: 0
            LOST_CONNECTIONS: 0
               ACCESS_DENIED: 0
               EMPTY_QUERIES: 0
       TOTAL_SSL_CONNECTIONS: 0

      As best I can tell from reading the source code, there are just a lot of places where the appropriate counter isn't incremented.

        Smart Checklist

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  zsolt.parragi Zsolt Parragi
                  Reporter:
                  ravyn440 Ernie Souhrada
                • Votes:
                  1 Vote for this issue
                  Watchers:
                  3 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: