github.com/matrixorigin/matrixone@v0.7.0/test/distributed/cases/zz_accesscontrol/inner_object.result (about)

     1  drop account if exists account1;
     2  drop account if exists inner_account;
     3  drop role if exists revoke_role_1;
     4  select user_name,owner from mo_catalog.mo_user where user_name="root";
     5  user_name    owner
     6  root    0
     7  select role_id,role_name,owner from mo_catalog.mo_role where role_name in ("moadmin","public");
     8  role_id    role_name    owner
     9  0    moadmin    0
    10  1    public    0
    11  create account account1 ADMIN_NAME 'admin' IDENTIFIED BY '123456';
    12  select role_id,role_name,owner from mo_catalog.mo_role;
    13  role_id    role_name    owner
    14  2    accountadmin    0
    15  1    public    0
    16  show databases;
    17  Database
    18  system
    19  system_metrics
    20  information_schema
    21  mysql
    22  mo_catalog
    23  show grants;
    24  Grants for account1:admin@localhost
    25  use system;
    26  show triggers;
    27  Trigger    Event    Table    Statement    Timing    Created    sql_mode    Definer    character_set_client    collation_connection    Database Collation
    28  use mo_catalog;
    29  show columns from mo_tables;
    30  Field    Type    Null    Key    Default    Extra    Comment
    31  creator    INT UNSIGNED    YES        NULL
    32  account_id    INT UNSIGNED    YES        NULL
    33  owner    INT UNSIGNED    YES        NULL
    34  rel_comment    VARCHAR(5000)    YES        NULL
    35  relkind    VARCHAR(5000)    YES        NULL
    36  reldatabase    VARCHAR(5000)    YES        NULL
    37  rel_createsql    TEXT    YES        NULL
    38  viewdef    BLOB    YES        NULL
    39  relname    VARCHAR(5000)    YES        NULL
    40  reldatabase_id    BIGINT UNSIGNED    YES        NULL
    41  rel_id    BIGINT UNSIGNED    NO    PRI    NULL
    42  created_time    TIMESTAMP    YES        NULL
    43  constraint    VARCHAR(5000)    YES        NULL
    44  relpersistence    VARCHAR(5000)    YES        NULL
    45  partitioned    BLOB    YES        NULL
    46  select datname, dat_createsql from mo_database;
    47  datname    dat_createsql
    48  system    create database system;
    49  system_metrics    create database system_metrics;
    50  information_schema    create database information_schema;
    51  mysql    create database mysql;
    52  mo_catalog    
    53  select relname from mo_tables where relname="sql_statement_total";
    54  relname
    55  sql_statement_total
    56  select relname from mo_tables where relname="mo_user";
    57  relname
    58  mo_user
    59  select relname from mo_tables where relname="tables";
    60  relname
    61  tables
    62  select user_name,authentication_string from mo_user;
    63  user_name    authentication_string
    64  admin    123456
    65  select role_name from mo_role;
    66  role_name
    67  accountadmin
    68  public
    69  create database account_db;
    70  use account_db;
    71  show tables;
    72  tables_in_account_db
    73  create table a(col int);
    74  show create table a;
    75  Table    Create Table
    76  a    CREATE TABLE `a` (\n`col` INT DEFAULT NULL\n)
    77  show tables;
    78  tables_in_account_db
    79  a
    80  show databases;
    81  Database
    82  system
    83  system_metrics
    84  information_schema
    85  mysql
    86  account_db
    87  mo_catalog
    88  update mo_catalog.mo_tables set relname='mo_aaaa';
    89  internal error: do not have privilege to execute the statement
    90  insert into mo_catalog.mo_role values (1763,'apple',0,1,'2022-09-22 06:53:34','');
    91  internal error: do not have privilege to execute the statement
    92  delete from mo_catalog.mo_user;
    93  internal error: do not have privilege to execute the statement
    94  drop table mo_catalog.mo_account;
    95  internal error: do not have privilege to execute the statement
    96  delete from mo_catalog.mo_user_grant;
    97  internal error: do not have privilege to execute the statement
    98  delete from mo_catalog.mo_role_grant;
    99  internal error: do not have privilege to execute the statement
   100  delete from mo_catalog.mo_role_privs;
   101  internal error: do not have privilege to execute the statement
   102  delete from mo_catalog.mo_database;
   103  internal error: do not have privilege to execute the statement
   104  delete from mo_catalog.mo_columns;
   105  internal error: do not have privilege to execute the statement
   106  drop database information_schema;
   107  internal error: do not have privilege to execute the statement
   108  drop database mo_catalog;
   109  internal error: do not have privilege to execute the statement
   110  drop database system;
   111  internal error: do not have privilege to execute the statement
   112  drop database system_metrics;
   113  internal error: do not have privilege to execute the statement
   114  revoke moadmin,public from root;
   115  internal error: the role moadmin can not be revoked
   116  select count(*) from mo_catalog.mo_role_privs where role_name in ('moadmin','public');
   117  count(*)
   118  34
   119  drop role if exists moadmin,public;
   120  internal error: can not delete the role moadmin
   121  select role_name from mo_role where role_name in('moadmin','public');
   122  SQL parser error: table "mo_role" does not exist
   123  drop user if exists admin,root;
   124  internal error: can not delete the user root
   125  create account inner_account ADMIN_NAME 'admin' IDENTIFIED BY '111';
   126  revoke accountadmin from admin;
   127  internal error: the role accountadmin can not be revoked
   128  select count(*) from mo_catalog.mo_role_privs where role_name in ('accountadmin');
   129  count(*)
   130  30
   131  drop role if exists accountadmin;
   132  internal error: can not delete the role accountadmin
   133  select role_name from mo_catalog.mo_role where role_name in('accountadmin');
   134  role_name
   135  accountadmin
   136  drop account if exists account1;
   137  drop account if exists inner_account;
   138  drop role if exists revoke_role_1;