This commit is contained in:
Laurent Indermuehle 2023-09-21 22:25:27 +02:00
parent 0bcfdb72ab
commit 56582f52a2
No known key found for this signature in database
GPG key ID: 93FA944C9F34DD09
3 changed files with 27 additions and 27 deletions

View file

@ -486,31 +486,32 @@ def privileges_get(module, cursor, user, host, maria_role=False):
else: else:
return x return x
mysql8_all_privileges = [sorted([ mysql8_all_privileges = [
'SELECT', 'INSERT', 'UPDATE', 'DELETE', 'CREATE', 'DROP', 'RELOAD', sorted([
'SHUTDOWN', 'PROCESS', 'FILE', 'REFERENCES', 'INDEX', 'ALTER', 'SELECT', 'INSERT', 'UPDATE', 'DELETE', 'CREATE', 'DROP', 'RELOAD',
'SHOW DATABASES', 'SUPER', 'CREATE TEMPORARY TABLES', 'SHUTDOWN', 'PROCESS', 'FILE', 'REFERENCES', 'INDEX', 'ALTER',
'LOCK TABLES', 'EXECUTE', 'REPLICATION SLAVE', 'SHOW DATABASES', 'SUPER', 'CREATE TEMPORARY TABLES',
'REPLICATION CLIENT', 'CREATE VIEW', 'SHOW VIEW', 'CREATE ROUTINE', 'LOCK TABLES', 'EXECUTE', 'REPLICATION SLAVE',
'ALTER ROUTINE', 'CREATE USER', 'EVENT', 'TRIGGER', 'REPLICATION CLIENT', 'CREATE VIEW', 'SHOW VIEW', 'CREATE ROUTINE',
'CREATE TABLESPACE', 'CREATE ROLE', 'DROP ROLE' 'ALTER ROUTINE', 'CREATE USER', 'EVENT', 'TRIGGER',
]), sorted([ 'CREATE TABLESPACE', 'CREATE ROLE', 'DROP ROLE']
'APPLICATION_PASSWORD_ADMIN', 'AUDIT_ABORT_EXEMPT', 'AUDIT_ADMIN', ), sorted([
'AUTHENTICATION_POLICY_ADMIN', 'BACKUP_ADMIN', 'BINLOG_ADMIN', 'APPLICATION_PASSWORD_ADMIN', 'AUDIT_ABORT_EXEMPT', 'AUDIT_ADMIN',
'BINLOG_ENCRYPTION_ADMIN', 'CLONE_ADMIN', 'CONNECTION_ADMIN', 'AUTHENTICATION_POLICY_ADMIN', 'BACKUP_ADMIN', 'BINLOG_ADMIN',
'ENCRYPTION_KEY_ADMIN', 'FIREWALL_EXEMPT', 'FLUSH_OPTIMIZER_COSTS', 'BINLOG_ENCRYPTION_ADMIN', 'CLONE_ADMIN', 'CONNECTION_ADMIN',
'FLUSH_STATUS', 'FLUSH_TABLES', 'FLUSH_USER_RESOURCES', 'ENCRYPTION_KEY_ADMIN', 'FIREWALL_EXEMPT', 'FLUSH_OPTIMIZER_COSTS',
'GROUP_REPLICATION_ADMIN', 'GROUP_REPLICATION_STREAM', 'FLUSH_STATUS', 'FLUSH_TABLES', 'FLUSH_USER_RESOURCES',
'INNODB_REDO_LOG_ARCHIVE', 'INNODB_REDO_LOG_ENABLE', 'GROUP_REPLICATION_ADMIN', 'GROUP_REPLICATION_STREAM',
'PASSWORDLESS_USER_ADMIN', 'PERSIST_RO_VARIABLES_ADMIN', 'INNODB_REDO_LOG_ARCHIVE', 'INNODB_REDO_LOG_ENABLE',
'REPLICATION_APPLIER', 'REPLICATION_SLAVE_ADMIN', 'PASSWORDLESS_USER_ADMIN', 'PERSIST_RO_VARIABLES_ADMIN',
'RESOURCE_GROUP_ADMIN', 'RESOURCE_GROUP_USER', 'ROLE_ADMIN', 'REPLICATION_APPLIER', 'REPLICATION_SLAVE_ADMIN',
'SENSITIVE_VARIABLES_OBSERVER', 'SERVICE_CONNECTION_ADMIN', 'RESOURCE_GROUP_ADMIN', 'RESOURCE_GROUP_USER', 'ROLE_ADMIN',
'SESSION_VARIABLES_ADMIN', 'SET_USER_ID', 'SHOW_ROUTINE', 'SENSITIVE_VARIABLES_OBSERVER', 'SERVICE_CONNECTION_ADMIN',
'SYSTEM_USER', 'SYSTEM_VARIABLES_ADMIN', 'TABLE_ENCRYPTION_ADMIN', 'SESSION_VARIABLES_ADMIN', 'SET_USER_ID', 'SHOW_ROUTINE',
'XA_RECOVER_ADMIN' 'SYSTEM_USER', 'SYSTEM_VARIABLES_ADMIN', 'TABLE_ENCRYPTION_ADMIN',
])] 'XA_RECOVER_ADMIN']
)
]
for grant in grants: for grant in grants:
if isinstance(grant, dict): if isinstance(grant, dict):

View file

@ -220,6 +220,6 @@
that: that:
- result.databases.allviews.size == 0 - result.databases.allviews.size == 0
- name: Inport tasks file to tests users_privs filter - name: Import tasks file to tests users_privs filter
ansible.builtin.import_tasks: ansible.builtin.import_tasks:
file: filter_users_privs.yml file: filter_users_privs.yml

View file

@ -6,5 +6,4 @@ plugins/modules/mysql_info.py validate-modules:parameter-list-no-elements
plugins/modules/mysql_query.py validate-modules:parameter-list-no-elements plugins/modules/mysql_query.py validate-modules:parameter-list-no-elements
plugins/modules/mysql_user.py validate-modules:undocumented-parameter plugins/modules/mysql_user.py validate-modules:undocumented-parameter
plugins/modules/mysql_variables.py validate-modules:doc-required-mismatch plugins/modules/mysql_variables.py validate-modules:doc-required-mismatch
plugins/module_utils/mysql.py pylint:unused-import
plugins/module_utils/version.py pylint:unused-import plugins/module_utils/version.py pylint:unused-import