| Server IP : 209.209.40.120 / Your IP : 216.73.217.112 Web Server : Microsoft-IIS/10.0 System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586 User : NEWWWW$ ( 0) PHP Version : 8.3.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Program Files/MySQL/MySQL Workbench 6.3 CE/modules/ |
Upload File : |
�
�"�Xc @ s� d d l m Z m Z d d l m Z d d l m Z d d l Z d d l m Z d e
f d � � YZ d Z d Z
d
Z d Z d Z d
Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z! d Z" d Z# d Z$ d! Z% i d" d# f d$ 6d% d& f d' 6d( d) f d* 6d+ d, f d- 6d. d/ f d0 6d1 d2 f d3 6d4 d5 f d6 6d7 d8 f d9 6d: d; f d< 6d= d> f d? 6d@ dA f dB 6dC dD f dE 6dF dG f dH 6dI dJ f dK 6d dL f dM 6dN dO f dP 6dQ dR f dS 6dT dU f dV 6dW dX f dY 6dZ d[ f d\ 6d] d^ f d_ 6d` da f db 6dc dd f de 6df dg f dh 6di dj f dk 6dl dm f dn 6do dp f dq 6dr ds f dt 6du dv f dw 6dx dy f dz 6d{ dy f d| 6Z& e' d} � e& j( � D� � Z) i d~ d d� d� g d� d� d� d� g d� d� f dz 6d~ d� d� d� d� d� d� g d� d� d� d� g d� d� f d| 6Z* d� d� e& j+ � f d� d� dq d6 dM d9 dP g f d� d� d6 dP g f d� d� dn d6 g f d� d� dB dn d6 dM d| g f d� d� d< g f d� d� d0 d3 dB dq dK d- dH d' d$ d* dS dV dt db de dh dk dM g f d� d� d0 dK dH dt db de dh dk dM dz g
f d� d� d_ d\ dP g f d� d� dq d$ dV dM g f g
Z, d� � Z- d� � Z. d� � Z/ d� e0 f d� � � YZ1 d� e0 f d� � � YZ2 d� e0 f d� � � YZ3 d� e0 f d� � � YZ4 d S(� i����( t
QueryErrort escape_sql_string( t Version( t PermissionDeniedErrorN( t log_errort WBSecurityValidationErrorc B s e Z RS( ( t __name__t
__module__( ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR s s/ SELECT User, Host FROM mysql.user ORDER BY Users SHOW DATABASESs� SELECT d.User, d.Host, d.Db FROM mysql.db AS d LEFT JOIN mysql.user AS u ON d.User = u.user AND d.Host = u.Host WHERE u.User IS NULLs� SELECT t.User, t.Host, t.Db, t.Table_name FROM mysql.tables_priv AS t LEFT JOIN mysql.user AS u ON t.User = u.user AND t.Host = u.Host WHERE u.User IS NULLs� SELECT c.User, c.Host, c.Db, c.Table_name, c.Column_name FROM mysql.columns_priv AS c LEFT JOIN mysql.user AS u ON c.User = u.user AND c.Host = u.Host WHERE u.User IS NULLs� SELECT p.User, p.Host, p.Db, p.Routine_name, p.Routine_type FROM mysql.procs_priv AS p LEFT JOIN mysql.user AS u ON p.User = u.user AND p.Host = u.Host WHERE u.User IS NULLsV SELECT * FROM mysql.user WHERE User='%(user)s' AND Host='%(host)s' ORDER BY User, HostsL SELECT * FROM mysql.db WHERE User='%(user)s' AND Host='%(host)s' ORDER BY DbsX SELECT * FROM mysql.tables_priv WHERE Host='%(host)s' AND User='%(user)s' AND Db='mysql's> CREATE USER '%(user)s'@'%(host)s' IDENTIFIED BY '%(password)s'sM CREATE USER '%(user)s' IDENTIFIED WITH '%(auth_plugin)s' AS '%(auth_string)s's8 CREATE USER '%(user)s' IDENTIFIED WITH '%(auth_plugin)s's7 GRANT %(granted_privs)s ON *.* TO '%(user)s'@'%(host)s's: REVOKE %(revoked_privs)s ON *.* FROM '%(user)s'@'%(host)s's: GRANT USAGE ON *.* TO '%(user)s'@'%(host)s' WITH %(limit)ssB RENAME USER '%(old_user)s'@'%(old_host)s' TO '%(user)s'@'%(host)s'sA SET PASSWORD FOR '%(user)s'@'%(host)s' = PASSWORD('%(password)s')s+ SET PASSWORD FOR '%(user)s'@'%(host)s' = ''s= ALTER USER '%(user)s'@'%(host)s' IDENTIFIED BY '%(password)s's1 ALTER USER '%(user)s'@'%(host)s' IDENTIFIED BY ''sA REVOKE %(revoked_privs)s ON `%(db)s`.* FROM '%(user)s'@'%(host)s's> GRANT %(granted_privs)s ON `%(db)s`.* TO '%(user)s'@'%(host)s's0 ALTER USER '%(user)s'@'%(host)s' PASSWORD EXPIREs FLUSH PRIVILEGESs> REVOKE ALL PRIVILEGES, GRANT OPTION FROM '%(user)s'@'%(host)s's DROP USER '%(user)s'@'%(host)s't SELECTs The SELECT privilege enables you to select rows from tables in a database.
SELECT statements require the SELECT privilege only if they actually retrieve rows from a table. Some SELECT statements do not access tables and can be executed without permission for any databaset Select_privt INSERTs� The INSERT privilege enables you to be inserted into tables in a database.
INSERT is also required for the ANALYZE TABLE, OPTIMIZE TABLE, and REPAIR TABLE table-maintenance statements.t Insert_privt UPDATEsG The UPDATE privilege enables you to be updated in tables in a database.t Update_privt DELETEsI The DELETE privilege enables you to be deleted from tables in a database.t Delete_privt CREATEsB The CREATE privilege enables creation of new databases and tables.t Create_privt DROPs The DROP privilege enables you to drop (remove) existing databases, tables, and views.
Beginning with MySQL 5.1.10, the DROP privilege is also required in order to use the statement ALTER TABLE ... DROP PARTITION on a partitioned table.
Beginning with MySQL 5.1.16, the DROP privilege is required for TRUNCATE TABLE (before that, TRUNCATE TABLE requires the DELETE privilege).
If you grant the DROP privilege for the mysql database to a user, that user can drop the database in which the MySQL access privileges are stored.t Drop_privt RELOADs� The RELOAD privilege enables use of the FLUSH statement.
It also enables mysqladmin commands that are equivalent to FLUSH operations:
flush-hosts, flush-logs, flush-privileges, flush-status, flush-tables, flush-threads, refresh, and reload.t Reload_privt SHUTDOWNso The SHUTDOWN privilege enables use of the mysqladmin shutdown command. There is no corresponding SQL statement.t
Shutdown_privt PROCESSsG The PROCESS privilege pertains to display of information about the threads executing within the server
(that is, information about the statements being executed by sessions).
The privilege enables use of SHOW PROCESSLIST or mysqladmin processlist to see threads belonging to other accounts; you can always see your own threads.t Process_privt FILEsk The FILE privilege gives you permission to read and write files on the server host using the
LOAD DATA INFILE and SELECT ... INTO OUTFILE statements and the LOAD_FILE() function. A user who has the FILE privilege
can read any file on the server host that is either world-readable or readable by the MySQL server.
(This implies the user can read any file in any database directory, because the server can access any of those files.)
The FILE privilege also enables the user to create new files in any directory where the MySQL server has write access.
As a security measure, the server will not overwrite existing files.t File_privs GRANT OPTIONs� The GRANT OPTION privilege enables you to give to other users or remove from other users those privileges that you yourself possess.t
Grant_privt
REFERENCESs- The REFERENCES privilege currently is unused.t References_privt INDEXs� The INDEX privilege enables you to create or drop (remove) indexes.
INDEX applies to existing tables. If you have the CREATE privilege for a table, you can include index definitions in the CREATE TABLE statement.t
Index_privt ALTERs� The ALTER privilege enables use of ALTER TABLE to change the structure of or rename tables.
(ALTER TABLE also requires the INSERT and CREATE privileges.)t
Alter_privss The SHOW DATABASES privilege enables the account to see database names by issuing the
SHOW DATABASE statement. Accounts that do not have this privilege see only databases for which
they have some privileges, and cannot use the statement at all if the server was started with
the --skip-show-database option. Note that any global privilege is a privilege for the database.t Show_db_privt SUPERs8 The SUPER privilege enables an account to use CHANGE MASTER TO, KILL or
mysqladmin kill to kill threads belonging to other accounts (you can always kill your own threads),
PURGE BINARY LOGS, configuration changes via SET GLOBAL to modify global system variables,
the mysqladmin debug command, enabling or disabling logging, performing updates even if the read_only
system variable is enabled, starting and stopping replication on slave servers, and allows you to
connect (once) even if the connection limit controlled by the max_connections system variable is reached.t
Super_privs CREATE TEMPORARY TABLESsj The CREATE TEMPORARY TABLES privilege enables the use of the keyword TEMPORARY in CREATE TABLE statements.t Create_tmp_table_privs LOCK TABLESs� The LOCK TABLES privilege enables the use of explicit LOCK TABLES statements to lock tables for which you have the SELECT privilege.
This includes the use of write locks, which prevents other sessions from reading the locked table.t Lock_tables_privt EXECUTEsX The EXECUTE privilege is required to execute stored routines (procedures and functions).t Execute_privs REPLICATION SLAVEs� The REPLICATION SLAVE privilege should be granted to accounts that are used
by slave servers to connect to the current server as their master.
Without this privilege, the slave cannot request updates that have been made to databases on the master server.t Repl_slave_privs REPLICATION CLIENTs\ The REPLICATION CLIENT privilege enables the use of SHOW MASTER STATUS and SHOW SLAVE STATUSt Repl_client_privs CREATE VIEWs5 The CREATE VIEW privilege enables use of CREATE VIEW.t Create_view_privs SHOW VIEWs8 The SHOW VIEW privilege enables use of SHOW CREATE VIEW.t Show_view_privs CREATE ROUTINEs\ The CREATE ROUTINE privilege is needed to create stored routines (procedures and functions).t Create_routine_privs
ALTER ROUTINEsb The ALTER ROUTINE privilege is needed to alter or drop stored routines (procedures and functions).t Alter_routine_privs CREATE USERsh The CREATE USER privilege enables use of CREATE USER, DROP USER, RENAME USER, and REVOKE ALL PRIVILEGES.t Create_user_privt EVENTs� The EVENT privilege is required to create, alter, or drop events for the Event Scheduler. This privilege was added in MySQL 5.1.6.t
Event_privt TRIGGERs The TRIGGER privilege enables you to create and drop triggers.
You must have this privilege for a table to create or drop triggers for that table. This privilege was added in MySQL 5.1.6. (Prior to MySQL 5.1.6, trigger operations required the SUPER privilege.)t Trigger_privs CREATE TABLESPACEsd The CREATE TABLESPACE privilege is needed to create, alter, or drop tablespaces and log file groups.t Create_tablespace_privs * Modify Routinest t Routine_manage_attrs * Modify Access Controlt User_manage_attrc c s% | ] \ } } | d | f Vq d S( i N( ( t .0t keyt val( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pys <genexpr>~ s t mysqlt proct funct eventt Insertt Selectt Updatet DeletesX GRANT INSERT, SELECT, UPDATE, DELETE ON TABLE mysql.`%(table)s` TO '%(user)s'@'%(host)s's[ REVOKE INSERT, SELECT, UPDATE, DELETE ON TABLE mysql.`%(table)s` FROM '%(user)s'@'%(host)s't columns_privt dbt hostt
procs_privt tables_privt usert DBAs& grants the rights to perform all taskst MaintenanceAdmins' grants rights needed to maintain servert ProcessAdminsM rights needed to assess, monitor, and kill any user process running in servert UserAdmins8 grants rights to create users logins and reset passwordst
SecurityAdminsQ rights to manage logins and grant and revoke server and database level permissiont MonitorAdmins. minimum set of rights needed to monitor servert DBManagers# grants full rights on all databasest
DBDesigners9 rights to create and reverse engineer any database schemat ReplicationAdmins- rights needed to setup and manage replicationt BackupAdmins, minimal rights needed to backup any databasec C s� t | � t k r | f } n d } d } d } x� | D]� } t | � t k rU q7 n x[ t t | � � D]G } | | } | d k r� n" | d k s� | d k r� | } Pn d } qh W| d >| r� t | d � p� | } q7 W| S( Ni s \t %t _i� i i ( t typet strt ranget lent min( t tupt ordert wild_post charst tt it c( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt get_acl_sort� s$
'c C s t | � t | � S( N( Rb ( t t1t t2( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt acl_compare� s c C s( | j d d � j d d � j d d � S( Ns \s \\RU s \_RT s \%( t replace( t s( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt escape_schema_name� s t
AdminSecurityc B s� e Z d � Z d � Z d � Z e d � � Z e d � � Z e d � � Z d � Z d � Z
d � Z d � Z d
� Z
d � Z d � Z d
� Z d � Z RS( c C sy | | _ g | _ g | _ i | _ i | _ i | _ t | _ t | _ t | _ t | _
g | _ g | _ g | _
d S( N( t ctrl_bet _accountst
_schema_namest
_zombie_privst _account_info_cachet _schema_privileges_cachet Falset
has_plugint has_authentication_stringt has_max_user_connectionst has_password_expiredt schema_privilege_namest global_privilege_namest user_table_fields( t selfRj ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt __init__� s c C sL g } x? | j D]4 } t j | d � \ } } | r | j | � q q W| S( N( NN( Rv t
PrivilegeInfot gett Nonet append( Rx t privst namet privt desc( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt get_valid_privileges� s c s4 � j s� y � j j d � } Wn; t k
r\ } | j d k rS t d | � � n | � n X| d k r� xD | j � r� | j d � } | j d � rl � j j
| � ql ql Wq� n � j s�y � j j d � } Wn; t k
r} | j d k rt d | � � n | � n X| d k r�x� | j � r�| j d � } � j j
| � | j d � rl� j j
| � q | d k r�t
� _ q | d k r�t
� _ q | d k r�t
� _ q | d
k r t
� _ q q Wq�n g } y � j j t � } Wn] t k
r/} | j d k r&t d | � � n | � n# t k
rQ} t d | � � n X| d k r�x/ | j � r�| j d � } | j
| � qaWn | j � | � _ g } y � j j t � } Wn# t k
r�} t d | � � n X| r2xD | j � r.| j d
� } | j d � } | j
| | f � q�Wn � f d � }
|
t d g � } | |
t d d g � 7} | |
t d d d g � 7} | |
t d d g � 7} i } x> | D]6 \ }
} |
| k r�g | |
<n | |
j
| � q�W| � _ | | j � 7} | j t � | � _ i � _ i � _ | � d S( Ns DESCRIBE mysql.dbiv sJ Please make sure the used account has rights to the MySQL grant tables.
%st Fieldt _privs DESCRIBE mysql.usert max_user_connectionst plugint authentication_stringt password_expireds( Error querying privilege information: %st Databaset Usert Hostc s� y � j j | � } Wn( t k
r@ } t d | | f � g SXg } xx | r� | j � r� | j d � } | j d � } g | D] } | j | � ^ q� } | j | | f d j | � f � qJ W| S( Ns2 Could not get list of invalid privs: %s
Query: %s
R� R� t .( Rj t
exec_queryt ExceptionR t nextRowt stringByNameR} t join( t queryt fieldst resultt eR~ RI RF t ft parts( Rx ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt get_zombiesJ s "&t Dbt
Table_namet Column_namet Routine_name(! Ru Rj R� R t errorR R| R� R� t endswithR} Rw Rv t TrueRs Rq Rr Rt t LIST_SCHEMAS_QUERYR� t sortRl t LIST_ACCOUNTS_QUERYt ZOMBIE_SCHEMA_PRIVS_QUERYt ZOMBIE_TABLE_PRIVS_QUERYt ZOMBIE_COLUMN_PRIVS_QUERYt ZOMBIE_PROCS_PRIVS_QUERYRm t keysRe Rk Rn t _schema_privileges_by_user( Rx t callbackR� R� t fieldt schema_namesR t accountsRI RF R� R~ t zombiest accountR� ( ( Rx sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt
async_refresh s�
c C s | j S( N( Rl ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� p s c C s g | j D] } t | � ^ q
S( N( Rl Rh ( Rx Rg ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt escaped_schema_namest s c C s | j S( N( Rk ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt
account_namesx s c C s� t i t | � d 6t | � d 6} y$ | j j d � | j j | � Wna t k
r� } t d | | t | � f � | j d k r� t d | | f d � � n | � n Xd S( NRI RF s use mysqls Error removing account %s@%s:
%si� s" Error removing the account %s@%s:s] You must have the global CREATE USER privilege or the DELETE privilege for the mysql database( t REMOVE_USERR Rj t exec_sqlR R RW R� R� ( Rx t usernameRF R� R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt do_delete_account} s $ c C sx | j r" | j | j | j � n | j | j d | j =| j | j f | j k rt | j j | j | j f � n d S( Nt @( t is_commitedR� R� RF Rn Rk t remove( Rx R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt delete_account� s
c C s� y" | j j | j | j f � } Wn t k
r5 nR X| j | j f | j | <| j d | j | j k r� | j | j d | j =n | | j | j d | j <| S( NR� ( Rk t indexR� RF t
ValueErrorRn ( Rx R� t backupR` ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt revert_account� s "
c C s_ | j � } t | _ | j d 7_ | | j | j d | j <| j j | j | j f � | S( Nt _copyR� ( t copyRp R� R� Rn RF Rk R} ( Rx R� R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt copy_account� s c sz d � � f d � � t � � } d | _ � d | j � | _ | � j | j d | j <� j j | j | j f � | S( Nc sc | | r t | � n d } | | f � j k r_ � | | t | t � rS | d n d � } n | S( NR6 i ( RW Rk t
isinstancet int( RI RF t counterR ( Rx t unique_name( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� � s .RT t newuserR� ( R| t AdminAccountRF R� Rn Rk R} ( Rx t acct( ( Rx R� sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt create_account� s c C s | j j | | f � S( N( Rm t has_key( Rx RI RF ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt is_zombie� s c C s | j j | | f d � S( N( Rm R{ R| ( Rx RI RF ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt get_zombie_privs� s c C s� yl | d | } | j j | � r8 | | j | � d St | � } | j | | � | | j | <| | � Wn t j j � � n Xd S( NR� ( Rn R� R� t loadt mformst Utilitiest driver_shutdown( Rx R� R RF R: R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt async_get_account� s
c C s6 | j | j k r" | j | j =n | | j | j <| S( N( R� Ro ( Rx R~ R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt revert_user_schema_privs� s ( R R Ry R� R� t propertyR� R� R� R� R� R� R� R� R� R� R� R� ( ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyRi � s o
t AdminUserDbPrivEntryc B s) e Z d Z e � Z d � Z d � Z RS( c C s. t | � t k s t � | | _ | | _ d S( N( RV t sett AssertionErrorRE t
privileges( Rx RE R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyRy � s c C s t | j | j j � � S( N( R� RE R� R� ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� � s N( R R R| RE R� R� Ry R� ( ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� � s t AdminUserDbPrivsc B sS e Z d Z d � Z e d � � Z d � Z d � Z d � Z d � Z
d � Z RS( c C s | | _ g | _ g | _ d S( N( t _ownert entriest _deleted_entries( Rx t owner( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyRy � s c C s
| j j j S( N( R� Ru ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyRu � s c C sE t | j � } g | j D] } | j � ^ q | _ | j | _ | S( N( R� R� R� R� R� ( Rx R� R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� � s %
c C s# t | | � } | j j | � | S( N( R� R� R} ( Rx RE R� t entry( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt add_entry s c C s% | j j | j | � | j | =d S( N( R� R} R� ( Rx R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt del_entry s c C s t i t | j j � d 6t | j j � d 6} y | j j j | � } Wn# t k
rn } t d | � � n Xg | _ x� | j � r� t
� } x< | j D]1 } | j | � } | d k r� | j
| � q� q� W| j d � } | j j t | | � � q{ W| j j d � � g | _ d S( NRI RF s' Error querying security information: %st YR� c S s t | j | j � S( N( Re RE ( t at b( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt <lambda> s ( t GET_ACCOUNT_SCHEMA_PRIVS_QUERYR R� R� RF Rj R� R� R� R� R� Ru R� t addR} R� R� R� ( Rx R� R� R� R~ R� t valuet schema( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� s 0 c
C s | j j j d � x�g | j D] } t | f ^ q g | j D] } t | f ^ q? D]�\ } } i t | j j � d 6t | j j � d 6| j
d 6} g } g } xr | j D]g } t j
| d � \ } } | s� q� n | r� | | j k s� | j r| j | � q� | j | � q� W| r�| r�d j | � | d <y | j j j t | � Wq�t k
r�} | j d k r�t d | d
� � n | � q�Xn | rV d j | � | d <y | j j j t | � Wqt k
r } | j d k rt d | d
� � n | � qXqV qV Wd S( Ns use mysqlRI RF RE s , t
granted_privsi i sA Error assigning privileges for %(user)s@%(host)s in schema %(db)ss` You must have the GRANT OPTION privilege, and you must have the privileges that you are grantingt
revoked_privss@ Error revoking privileges for %(user)s@%(host)s in schema %(db)ss` You must have the GRANT OPTION privilege, and you must have the privileges that you are revoking( NN( i i ( i i ( R� Rj R� R� R� R� Rp R R� RF RE Ru Rz R{ R| R� R} R� t GRANT_SCHEMA_PRIVILEGES_QUERYR R� R� t REVOKE_SCHEMA_PRIVILEGES_QUERY(
Rx R� t deletedR� R� R� R� R� t priv_namet description( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt save$ s@ O
N( R R R| R� Ry R� Ru R� R� R� R� R� ( ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� � s R� c B sR e Z d Z d Z d Z d Z d Z d Z d Z d Z
e Z d Z
d Z d Z d Z d Z d Z d Z d Z e Z e Z e � Z e � Z e � Z e � Z i Z e Z d � Z e d � � Z d � Z! d � Z" d � Z# d � Z$ e d � � Z% d � Z& d � Z' e d
� � Z( e d � � Z) d � Z* d
� Z+ d � Z, d � Z- d � Z. RS( i c C s | | _ t | � | _ d S( N( R� R� t schema_privs( Rx R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyRy n s c C s
| j j S( N( R� Rj ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyRj r s c C s. | j d k r# d | j | j f S| j Sd S( Ns %s@%s( RF R| R� ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt formatted_namew s c C s� t | j � } | j j � | _ | j | _ | j | _ | j | _ | j | _ | j | _ | j | _ | j
| _
| j | _ | j | _ | j
| _
| j | _ | j | _ | j j � | _ | j j � | _ | S( N( R� R� R� R� R� t passwordt confirm_passwordR� RF t
max_questionst max_updatest max_connectionsR� t auth_plugint auth_stringR� t
_global_privst _custom_checked_privs( Rx R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� } s" c C s@ | j � } | j | _ | j | _ | j | _ | j | _ | S( N( R� t _orig_usernamet _orig_passwordt _orig_auth_stringt
_orig_host( Rx R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt snapshot_for_revert� s c C sF | r | j j | g � n& | j j | g � | j j | g � d S( N( R� t updatet difference_updatet _remembered_custom_privs( Rx R� t flag( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt toggle_priv� s c C s t | j p | j � S( N( t boolR R� ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt is_custom_role_needed� s c C s t � | _ d S( N( R� R ( Rx ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt forget_custom_privs� s c sQ � f d � } | | � } | rM | r: � j j | � qM � j j | � n d S( Nc sY | d k r � j Sx< t D]4 \ } } } | | k r t | � j � j j � Sq Wt � S( Nt Custom( R t SecurityAdminRolesR� t intersectionR� Rv ( t rolet rnamet rdesct rprivs( Rx ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt privs_for_role� s ( R� R� R ( Rx R
R R R~ ( ( Rx sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt toggle_role� s c C s� g } t � } x[ t D]S \ } } } t | � j | j j � j | j � r | j | � | j | � q q W| j | | _ | j r� | j d � | j
j | j � n | S( NR ( R� R R R� Rv t issubsetR� R} R� R� R ( Rx t rolest privs_from_rolesR R R
( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt admin_roles� s '
c C s- g | j D] } t j | | g � d ^ q
S( Ni ( R� Rz R{ ( Rx t p( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt raw_privilege_names� s c C s� t i t | j � d 6| j d 6} y* | j j j d � | j j j | � WnG t k
r� } | j d k r� t d | j | j f d � � q� � n Xd S( NRI RF s use mysqli� s1 Error revoking privileges for the account %s@%s:s] You must have the global CREATE USER privilege or the UPDATE privilege for the mysql database(
t
REVOKE_ALLR R� RF R� Rj R� R R� R� ( Rx t commandR� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt
revoke_all� s $ c C s� t i t | j � d 6| j d 6} y* | j j j d � | j j j | � Wn2 t k
r� } t d | j | j | f � � n Xt | _
d S( NRI RF s use mysqls. Error expiring password for account %s@%s: %s( t EXPIRE_PASSWORDR R� RF R� Rj R� R R� R� R� ( Rx R R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt expire_password� s $#c s� g } � j � j k r' t d � � n | j d � � j sL t d � � n � j r� � j � j k sy � j � j k r� � j � j f � j j
k r� t d � j � � � q� nL � j s� � j j
j � j � j f � d k r� t d � j � � � q� n i � j rt
� j � n � j d 6� j r<t
� j � n � j d 6t
� j � pXd d 6t
� j � pnd
d 6t
� j p�d
� d 6� j r�t
� j � n d d
6� j r�t
� j � n d d 6} t } � j s1� j r� j d k r� j d k rt } q t } n t } t } | | g | d *n\ � j d k rO� j d k sUt � � j � j k sy� j � j k r�t | g | d *n d d d g � j j r�d g p�g } g � j � j � j g � j j r�� j g p�g D] } t | � ^ q�} t t | | � � } | � j k } d � � t! � f d � � j j" D� � }
� j# � j$ |
@} |
� j$ } |
� j# | }
| s�| r�d | k r�d | d <| j% d � n |
| t! d g � k r�d g } n! g | D] } t& | d ^ q�} d j' | � p
d | d <t( | } d
} xX | j) � D]J \ } } | � j j* | � k r1| sdd } n | d | | f 7} q1q1W| j | | � n |
r�|
|
r�g |
D] } t& | d ^ q�} d j' | � | d <| j t+ | � q�| j t, | � n � j � j- k r�| r�� j j. j/ rN� j j. j/ t0 d! d" d# � k rNt1 n t2 } � j j. j/ r�� j j. j/ t0 d! d" d# � k r�t3 n t3 } � j d$ k r�| j d% � n
| j d& � | d r�| j | | � q�| j | | � n � j r�d' n d( } x� | D]� } y � j j. j4 | � Wq
t5 k
r�} | j6 d) k rjt7 d* | � j � j f � � q�t7 d+ | � j � j | j8 p�| f � � q
t7 k
r�} t7 d+ | � j � j | f � � q
Xq
Wt! g � j# D] } | j9 d, � r�| ^ q�� } t! g � j$ D] } | j9 d, � r| ^ q� } � f d- � } � f d. � } x! | j: | � D] } | | � qaWx! | j: | � D] } | | � q�Wt � _ � j; j< � d S(/ NsH The new password and its confirmation don't match. Please re-enter them.s use mysqls Host name must not be blanks4 The '%s' account already exists and cannot be saved.i t old_usert old_hostt NULLRI R6 RF R� R� R� t mysql_native_passwordi t MAX_QUERIES_PER_HOURt MAX_UPDATES_PER_HOURt MAX_CONNECTIONS_PER_HOURt MAX_USER_CONNECTIONSc S s4 t j | d � d o3 t j | d � d d d k S( Ni t *( NN( NN( Rz R{ R| ( R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� s c 3 s! | ] } � | � r | Vq d S( N( ( R9 R� ( t is_normal_priv( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pys <genexpr> s R t OPTIONt GRANTs ALL PRIVILEGESs , t USAGER� s WITH s %s %s R� i i i t sha256_passwords SET old_passwords = 2s SET old_passwords = 0t changingt creatingiv s@ Error %s account %s@%s: Insufficient rights to perform operations Error %s account %s@%s: %st _attrc s� t | \ } } } } } d | k rq x� | D]> } | i | d 6� j d 6� j d 6} � j j j | � q, Wn8 | i | d 6� j d 6� j d 6} � j j j | � d S( Ns %(table)st tableRI RF ( t AdminAttributesR� RF R� Rj R� ( R� RE t tablesR~ t grantt revokeR, R� ( Rx ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt
grant_special\ s
%%c s� t | \ } } } } } d | k rq x� | D]> } | i | d 6� j d 6� j d 6} � j j j | � q, Wn8 | i | d 6� j d 6� j d 6} � j j j | � d S( Ns %(table)sR, RI RF ( R- R� RF R� Rj R� ( R� RE R. R~ R/ R0 R, R� ( Rx ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt revoke_specialf s
%%(= R� R� R R} RF R� R� R� R� R� R� R� t countR R� R| R� Rp t CREATE_USER_QUERY_PLUGINt$ CREATE_USER_QUERY_PLUGIN_AUTH_STRINGt CREATE_USER_QUERYR� R� t RENAME_USER_QUERYRs R� R� R� R� RW t dictt zipt _orig_account_limitsR� Rv R� t _orig_global_privsR� Rz R� t GRANT_GLOBAL_PRIVILEGES_QUERYt iteritemsR{ t REVOKE_GLOBAL_PRIVILEGES_QUERYR R� Rj t target_versionR t CHANGE_PASSWORD_QUERYt CHANGE_PASSWORD_QUERY_576t BLANK_PASSWORD_QUERYR� R R� R� t errortextR� t
differenceR� R� ( Rx t queriesR� t password_already_sett create_queryt namesRg t valuest account_limitst limits_changedt all_normal_privst new_granted_privst orig_revoked_privst new_revoked_privst priv_listR� t grant_queryt with_clauseR: R� t change_pwt blank_pwt actionR� R� R t new_attrst old_attrsR1 R2 ( ( R$ Rx sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� � s�
- ' "" " $$(M "
!
!<<
".*11
c C s\ t | _ t i t | � d 6t | � d 6} y | j j j | � } Wn# t k
rk } t d | � � n X| j � s� t d | | f � � n | j d � | _
| j d � | _ d | _ | j | _
| j
| _ | j | _ | j | _ | j d � | _ | j d � | _ | j d
� | _ i t | j � d 6t | j � d 6t | j � d
6| _ | j j r�| j d � | _ t | j � | j d <n | j j r�| j d � | _ n | j j r�| j d � | _ n t | _ | j j r| j d � d k | _ n | j j j r<| j j j t! d d d � k r<d n d } t" | j | � � d k | _# t" | j | � � d k | _$ t% � | _& x< | j j' D]. } | j | � d k r�| j& j( | � q�q�W| j) � t* i t | � d 6t | � d 6} y | j j j | � } Wn# t k
r5} t d | � � n Xi } xM | j � r�| j d � } | j d � }
|
r~|
j+ d � p�g | | <q?Wx� t, j- � D]� \ } \ } }
} } } | d k r�t } xP |
D]H } | j. | � s�t } Pn t% | � j/ t% | | � � s�t } Pq�q�W| r5| j& j( | � q5q�q�W| j& j0 � | _1 | j2 j3 � d S( NRI RF s' Error querying security information: %ss, Could not load account information for %s@%sR� R� s UnchangedPassword R� R� R� R R R! R� R" R� R� R� R� i i i R� i i s Error querying mysql table: %sR� t
Table_privt ,R< (4 R� R� t GET_ACCOUNT_QUERYR R� Rj R� R� R� R� R� RF R� R� R� R� R� R� t intByNameR� R� R� RW R: Rs R� Rq R� Rr Rp R� Rt R? R RY t old_authenticationt blank_passwordR� R� Rv R� R t# GET_ACCOUNT_MYSQL_TABLE_PRIVS_QUERYt splitR- t itemsR� R R� R; R� R� ( Rx R� t hostnameR� R� R� t password_columnR� t mysql_privsR, t table_privsR RE R. t required_privsR/ R0 t ok( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� ~ s� $ <
$#(
c C s! g } | j | j k r' t d � � n | j d � | j sL t d � � n i t | j � pa d d 6t | j � pw d d 6t | j p� d � d 6} | j d � | j j j r� | j j j j
d
d
d � r� | j d | � n | j d
� | j j j r%| j j j t d
d d � k r%t n t
} | j | | � | j d
� d } x� | D]� } y | j j j | � WqVt k
r�} | j d k r�t d | | j | j f � � qt d | | j | j | j p�| f � � qVt k
r} t d | | j | j | f � � qVXqVWd S( NsH The new password and its confirmation don't match. Please re-enter them.s use mysqls Host name must not be blankR RI R6 RF R� s SET old_passwords = 0i i sd UPDATE mysql.user SET plugin = 'mysql_native_password' WHERE user = '%(user)s' AND host = '%(host)s's FLUSH PRIVILEGESi R) iv s@ Error %s account %s@%s: Insufficient rights to perform operations Error %s account %s@%s: %s( R� R� R R} RF R R� R� Rj R? t# is_supported_mysql_version_at_leastR R@ RA R� R R� R� RC ( Rx RE R� RS RU R� R� ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt upgrade_password_format� s6
-
<
".N(/ R R R| R� R� R� R� R� R� R� R� Rp R� RF R� R� R� R� R� R� R� R\ R] R� R� R� R R; R: R� Ry R� Rj R� R� R� R R R R R R R R R� R� Rh ( ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyR� N sR
� c(5 t workbench.db_utilsR R t workbench.utilsR t wb_commonR R� t
workbench.logR R� R R� R� R� R� R� R� RZ R� R^ R6 R5 R4 R< R> t GRANT_LIMITS_QUERYR7 R@ RB RA t BLANK_PASSWORD_QUERY_576R� R� R t FLUSH_PRIVILEGESR R� Rz R8 R= t PrivilegeReverseDictR- R� R Rb Re Rh t objectRi R� R� R� ( ( ( sM C:\Program Files\MySQL\MySQL Workbench 6.3 CE\modules\wb_admin_security_be.pyt <module> s�
� a