golden hour

/usr/include/mysql/server/private

File/Folder	Size	Actions
aria_backup.h	1.51 KB
assume_aligned.h	2.29 KB
atomic	-
authors.h	9.9 KB
backup.h	1.21 KB
bounded_queue.h	6.67 KB
client_settings.h	1.89 KB
compat56.h	2.23 KB
config.h	14.18 KB
contributors.h	4.76 KB
create_options.h	4.42 KB
custom_conf.h	1.06 KB
datadict.h	1.53 KB
debug_sync.h	2 KB
derived_handler.h	2.32 KB
derror.h	980 B
des_key_file.h	1.21 KB
discover.h	1.53 KB
dur_prop.h	1.06 KB
embedded_priv.h	1.62 KB
event_data_objects.h	4.09 KB
event_db_repository.h	3.56 KB
event_parse_data.h	2.83 KB
event_queue.h	3.36 KB
event_scheduler.h	3.21 KB
events.h	4.59 KB
field.h	211.96 KB
field_comp.h	1.15 KB
filesort.h	6.67 KB
filesort_utils.h	8 KB
ft_global.h	3.04 KB
gcalc_slicescan.h	16.87 KB
gcalc_tools.h	11.62 KB
grant.h	2.69 KB
group_by_handler.h	3.45 KB
gstream.h	2.38 KB
ha_partition.h	62.22 KB
ha_sequence.h	5.94 KB
handle_connections_win.h	884 B
handler.h	188.39 KB
hash.h	4.34 KB
hash_filo.h	5.55 KB
heap.h	9.2 KB
hostname.h	5.29 KB
ilist.h	6.85 KB
init.h	852 B
innodb_priv.h	1.29 KB
item.h	263.12 KB
item_cmpfunc.h	128.01 KB
item_create.h	11.22 KB
item_func.h	124.59 KB
item_geofunc.h	34.69 KB
item_jsonfunc.h	19.8 KB
item_row.h	5.43 KB
item_strfunc.h	64.55 KB
item_subselect.h	56.19 KB
item_sum.h	69.2 KB
item_timefunc.h	57.85 KB
item_vers.h	3.79 KB
item_windowfunc.h	32.61 KB
item_xmlfunc.h	4.36 KB
key.h	2 KB
keycaches.h	1.95 KB
lex.h	28.9 KB
lex_ident.h	2.07 KB
lex_string.h	3.97 KB
lex_symbol.h	1.29 KB
lf.h	6.31 KB
lock.h	2.15 KB
log.h	44.46 KB
log_event.h	178.94 KB
log_event_data_type.h	1.85 KB
log_event_old.h	19.32 KB
log_slow.h	1.98 KB
maria.h	5.73 KB
mariadb.h	1.25 KB
mdl.h	36.78 KB
mem_root_array.h	6.94 KB
message.h	1.17 KB
multi_range_read.h	22.58 KB
my_alarm.h	2.37 KB
my_apc.h	4.62 KB
my_atomic.h	7.11 KB
my_atomic_wrapper.h	2.92 KB
my_base.h	26.5 KB
my_bit.h	6.05 KB
my_bitmap.h	5.22 KB
my_check_opt.h	2.56 KB
my_compare.h	10.93 KB
my_context.h	6.59 KB
my_counter.h	1.68 KB
my_cpu.h	4.85 KB
my_crypt.h	904 B
my_decimal.h	13.43 KB
my_default.h	1.84 KB
my_handler_errors.h	4.74 KB
my_json_writer.h	17.9 KB
my_libwrap.h	1.16 KB
my_md5.h	1.45 KB
my_minidump.h	848 B
my_nosys.h	1.4 KB
my_rdtsc.h	8.15 KB
my_rnd.h	1.04 KB
my_service_manager.h	1.47 KB
my_stack_alloc.h	6.2 KB
my_stacktrace.h	3.14 KB
my_time.h	10.22 KB
my_tree.h	3.9 KB
my_uctype.h	67.9 KB
my_user.h	1.1 KB
myisam.h	17.11 KB
myisamchk.h	4.61 KB
myisammrg.h	4.78 KB
myisampack.h	14.58 KB
mysql_async.h	1.77 KB
mysqld.h	38.7 KB
mysqld_default_groups.h	204 B
mysqld_suffix.h	1.17 KB
mysys_err.h	2.95 KB
nt_servc.h	2.94 KB
opt_range.h	57.58 KB
opt_subselect.h	14.21 KB
opt_trace.h	8.11 KB
opt_trace_context.h	3.21 KB
parse_file.h	4.11 KB
partition_element.h	5.09 KB
partition_info.h	18.85 KB
password.h	1.14 KB
pfs_file_provider.h	3.08 KB
pfs_idle_provider.h	1.35 KB
pfs_memory_provider.h	1.59 KB
pfs_metadata_provider.h	1.85 KB
pfs_socket_provider.h	2.21 KB
pfs_stage_provider.h	1.52 KB
pfs_statement_provider.h	4.25 KB
pfs_table_provider.h	2.56 KB
pfs_thread_provider.h	5.43 KB
pfs_transaction_provider.h	2.78 KB
privilege.h	27.9 KB
probes_mysql.h	973 B
probes_mysql_dtrace.h	32.23 KB
probes_mysql_nodtrace.h	4.89 KB
procedure.h	6.57 KB
protocol.h	12.32 KB
proxy_protocol.h	548 B
queues.h	3.46 KB
records.h	3.03 KB
repl_failsafe.h	1.55 KB
replication.h	15.73 KB
rijndael.h	1.67 KB
rowid_filter.h	15.13 KB
rpl_constants.h	3.28 KB
rpl_filter.h	4.43 KB
rpl_gtid.h	13.31 KB
rpl_injector.h	9.43 KB
rpl_mi.h	13.65 KB
rpl_parallel.h	13.57 KB
rpl_record.h	1.55 KB
rpl_record_old.h	1.37 KB
rpl_reporting.h	2.96 KB
rpl_rli.h	31.8 KB
rpl_tblmap.h	3.1 KB
rpl_utility.h	9.4 KB
scheduler.h	2.99 KB
scope.h	1.76 KB
select_handler.h	2.18 KB
semisync.h	2.23 KB
semisync_master.h	22.7 KB
semisync_master_ack_receiver.h	5.73 KB
semisync_slave.h	3.47 KB
service_versions.h	2 KB
session_tracker.h	13.96 KB
set_var.h	16.1 KB
slave.h	11.99 KB
source_revision.h	67 B
sp.h	22.02 KB
sp_cache.h	2 KB
sp_head.h	63.05 KB
sp_pcontext.h	24.31 KB
sp_rcontext.h	14 KB
span.h	3.84 KB
spatial.h	21.82 KB
sql_acl.h	13.8 KB
sql_admin.h	2.78 KB
sql_alloc.h	1.83 KB
sql_alter.h	11.86 KB
sql_analyse.h	11.23 KB
sql_analyze_stmt.h	11.48 KB
sql_array.h	6.79 KB
sql_audit.h	13.62 KB
sql_base.h	24.83 KB
sql_basic_types.h	9.28 KB
sql_binlog.h	895 B
sql_bitmap.h	7.66 KB
sql_bootstrap.h	1.63 KB
sql_cache.h	21.15 KB
sql_callback.h	1.51 KB
sql_class.h	250.08 KB
sql_cmd.h	9.13 KB
sql_connect.h	3.99 KB
sql_const.h	10.94 KB
sql_crypt.h	1.4 KB
sql_cte.h	16.15 KB
sql_cursor.h	2.26 KB
sql_db.h	2.16 KB
sql_debug.h	4.65 KB
sql_delete.h	1.31 KB
sql_derived.h	1.26 KB
sql_digest.h	3.73 KB
sql_digest_stream.h	1.53 KB
sql_do.h	954 B
sql_error.h	38.12 KB
sql_explain.h	27.1 KB
sql_expression_cache.h	4.26 KB
sql_get_diagnostics.h	7.68 KB
sql_handler.h	2.84 KB
sql_help.h	920 B
sql_hset.h	3.56 KB
sql_i_s.h	7.97 KB
sql_insert.h	2.39 KB
sql_join_cache.h	47.44 KB
sql_lex.h	166.31 KB
sql_lifo_buffer.h	9.45 KB
sql_limit.h	2.38 KB
sql_list.h	21.56 KB
sql_load.h	1.25 KB
sql_locale.h	2.64 KB
sql_manager.h	960 B
sql_mode.h	6.58 KB
sql_parse.h	8.26 KB
sql_partition.h	11.75 KB
sql_partition_admin.h	5.8 KB
sql_plist.h	7.55 KB
sql_plugin.h	7.39 KB
sql_plugin_compat.h	2.18 KB
sql_prepare.h	11.14 KB
sql_priv.h	17.67 KB
sql_profile.h	7.63 KB
sql_reload.h	1.01 KB
sql_rename.h	982 B
sql_repl.h	2.96 KB
sql_schema.h	3.23 KB
sql_select.h	86.56 KB
sql_sequence.h	5.06 KB
sql_servers.h	1.74 KB
sql_show.h	9.39 KB
sql_signal.h	3.28 KB
sql_sort.h	21.39 KB
sql_statistics.h	11.96 KB
sql_string.h	36.43 KB
sql_table.h	11.07 KB
sql_tablespace.h	956 B
sql_test.h	1.55 KB
sql_time.h	8.18 KB
sql_trigger.h	10.76 KB
sql_truncate.h	2.03 KB
sql_tvc.h	2.36 KB
sql_type.h	286 KB
sql_type_geom.h	18.53 KB
sql_type_int.h	9.73 KB
sql_type_json.h	6 KB
sql_type_real.h	1.23 KB
sql_type_string.h	1.59 KB
sql_udf.h	4.74 KB
sql_union.h	1.04 KB
sql_update.h	1.88 KB
sql_view.h	2.33 KB
sql_window.h	6.65 KB
ssl_compat.h	3.07 KB
strfunc.h	2.22 KB
structs.h	25.13 KB
sys_vars_shared.h	2.67 KB
t_ctype.h	5.51 KB
table.h	112.29 KB
table_cache.h	4.13 KB
thr_alarm.h	2.87 KB
thr_lock.h	6.7 KB
thr_malloc.h	1.17 KB
thr_timer.h	1.53 KB
thread_cache.h	5.77 KB
thread_pool_priv.h	4 KB
threadpool.h	4.51 KB
threadpool_generic.h	3.83 KB
transaction.h	1.43 KB
tzfile.h	4.9 KB
tztime.h	3.32 KB
uniques.h	4.1 KB
unireg.h	7.43 KB
vers_string.h	2.47 KB
violite.h	9.71 KB
waiting_threads.h	4.43 KB
welcome_copyright_notice.h	1.19 KB
win_tzname_data.h	6.35 KB
winservice.h	1.17 KB
wqueue.h	1.53 KB
wsrep.h	3.23 KB
wsrep_applier.h	2.64 KB
wsrep_binlog.h	3.36 KB
wsrep_client_service.h	2.5 KB
wsrep_client_state.h	1.53 KB
wsrep_condition_variable.h	1.45 KB
wsrep_high_priority_service.h	4.8 KB
wsrep_mutex.h	1.19 KB
wsrep_mysqld.h	19.88 KB
wsrep_mysqld_c.h	1.2 KB
wsrep_on.h	1.68 KB
wsrep_priv.h	1.6 KB
wsrep_schema.h	4.54 KB
wsrep_server_service.h	3.55 KB
wsrep_server_state.h	2.23 KB
wsrep_sst.h	3.86 KB
wsrep_storage_service.h	1.77 KB
wsrep_thd.h	10.58 KB
wsrep_trans_observer.h	17.81 KB
wsrep_types.h	997 B
wsrep_utils.h	9.07 KB
wsrep_var.h	4.17 KB
wsrep_xid.h	1.42 KB
xa.h	1.69 KB

Edit: sql_acl.h

#ifndef SQL_ACL_INCLUDED
#define SQL_ACL_INCLUDED

This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; version 2 of the License.

This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

You should have received a copy of the GNU General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1335  USA */

#include "violite.h"                            /* SSL_type */
#include "sql_class.h"                          /* LEX_COLUMN */
#include "grant.h"
#include "sql_cmd.h"                            /* Sql_cmd */

enum mysql_db_table_field
{
  MYSQL_DB_FIELD_HOST = 0,
  MYSQL_DB_FIELD_DB,
  MYSQL_DB_FIELD_USER,
  MYSQL_DB_FIELD_SELECT_PRIV,
  MYSQL_DB_FIELD_INSERT_PRIV,
  MYSQL_DB_FIELD_UPDATE_PRIV,
  MYSQL_DB_FIELD_DELETE_PRIV,
  MYSQL_DB_FIELD_CREATE_PRIV,
  MYSQL_DB_FIELD_DROP_PRIV,
  MYSQL_DB_FIELD_GRANT_PRIV,
  MYSQL_DB_FIELD_REFERENCES_PRIV,
  MYSQL_DB_FIELD_INDEX_PRIV,
  MYSQL_DB_FIELD_ALTER_PRIV,
  MYSQL_DB_FIELD_CREATE_TMP_TABLE_PRIV,
  MYSQL_DB_FIELD_LOCK_TABLES_PRIV,
  MYSQL_DB_FIELD_CREATE_VIEW_PRIV,
  MYSQL_DB_FIELD_SHOW_VIEW_PRIV,
  MYSQL_DB_FIELD_CREATE_ROUTINE_PRIV,
  MYSQL_DB_FIELD_ALTER_ROUTINE_PRIV,
  MYSQL_DB_FIELD_EXECUTE_PRIV,
  MYSQL_DB_FIELD_EVENT_PRIV,
  MYSQL_DB_FIELD_TRIGGER_PRIV,
  MYSQL_DB_FIELD_DELETE_VERSIONING_ROWS_PRIV,
  MYSQL_DB_FIELD_COUNT
};

extern const TABLE_FIELD_DEF mysql_db_table_def;
extern bool mysql_user_table_is_in_short_password_format;

extern LEX_CSTRING host_not_specified;
extern LEX_CSTRING current_user;
extern LEX_CSTRING current_role;
extern LEX_CSTRING current_user_and_current_role;

static inline int access_denied_error_code(int passwd_used)
{
#ifdef mysqld_error_find_printf_error_used
  return 0;
#else
  return passwd_used == 2 ? ER_ACCESS_DENIED_NO_PASSWORD_ERROR
                          : ER_ACCESS_DENIED_ERROR;
#endif
}

/* prototypes */

bool hostname_requires_resolving(const char *hostname);
bool  acl_init(bool dont_read_acl_tables);
bool acl_reload(THD *thd);
void acl_free(bool end=0);
privilege_t acl_get(const char *host, const char *ip,
                    const char *user, const char *db, my_bool db_is_pattern);
bool acl_authenticate(THD *thd, uint com_change_user_pkt_len);
bool acl_getroot(Security_context *sctx, const char *user, const char *host,
                 const char *ip, const char *db);
bool acl_check_host(const char *host, const char *ip);
bool check_change_password(THD *thd, LEX_USER *user);
bool change_password(THD *thd, LEX_USER *user);

bool mysql_grant_role(THD *thd, List<LEX_USER> &user_list, bool revoke);
bool mysql_grant(THD *thd, const char *db, List <LEX_USER> &user_list,
                 privilege_t rights, bool revoke, bool is_proxy);
int mysql_table_grant(THD *thd, TABLE_LIST *table, List <LEX_USER> &user_list,
                       List <LEX_COLUMN> &column_list, privilege_t rights,
                       bool revoke);
bool mysql_routine_grant(THD *thd, TABLE_LIST *table, const Sp_handler *sph,
                         List <LEX_USER> &user_list, privilege_t rights,
                         bool revoke, bool write_to_binlog);
bool grant_init();
void grant_free(void);
bool grant_reload(THD *thd);
bool check_grant(THD *thd, privilege_t want_access, TABLE_LIST *tables,
                 bool any_combination_will_do, uint number, bool no_errors);
bool check_grant_column (THD *thd, GRANT_INFO *grant,
                         const char *db_name, const char *table_name,
                         const char *name, size_t length, Security_context *sctx);
bool check_column_grant_in_table_ref(THD *thd, TABLE_LIST * table_ref,
                                     const char *name, size_t length, Field *fld);
bool check_grant_all_columns(THD *thd, privilege_t want_access,
                             Field_iterator_table_ref *fields);
bool check_grant_routine(THD *thd, privilege_t want_access,
                         TABLE_LIST *procs, const Sp_handler *sph,
                         bool no_error);
bool check_grant_db(THD *thd,const char *db);
bool check_global_access(THD *thd, const privilege_t want_access, bool no_errors= false);
bool check_access(THD *thd, privilege_t want_access,
                  const char *db, privilege_t *save_priv,
                  GRANT_INTERNAL_INFO *grant_internal_info,
                  bool dont_check_global_grants, bool no_errors);
privilege_t get_table_grant(THD *thd, TABLE_LIST *table);
privilege_t get_column_grant(THD *thd, GRANT_INFO *grant,
                             const char *db_name, const char *table_name,
                             const char *field_name);
bool get_show_user(THD *thd, LEX_USER *lex_user, const char **username,
                   const char **hostname, const char **rolename);
void mysql_show_grants_get_fields(THD *thd, List<Item> *fields,
                                  const char *name, size_t length);
bool mysql_show_grants(THD *thd, LEX_USER *user);
bool mysql_show_create_user(THD *thd, LEX_USER *user);
int fill_schema_enabled_roles(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_applicable_roles(THD *thd, TABLE_LIST *tables, COND *cond);
void get_privilege_desc(char *to, uint max_length, privilege_t access);
void get_mqh(const char *user, const char *host, USER_CONN *uc);
bool mysql_create_user(THD *thd, List <LEX_USER> &list, bool handle_as_role);
bool mysql_drop_user(THD *thd, List <LEX_USER> &list, bool handle_as_role);
bool mysql_rename_user(THD *thd, List <LEX_USER> &list);
int mysql_alter_user(THD *thd, List <LEX_USER> &list);
bool mysql_revoke_all(THD *thd, List <LEX_USER> &list);
void fill_effective_table_privileges(THD *thd, GRANT_INFO *grant,
                                     const char *db, const char *table);
bool sp_revoke_privileges(THD *thd, const char *sp_db, const char *sp_name,
                          const Sp_handler *sph);
bool sp_grant_privileges(THD *thd, const char *sp_db, const char *sp_name,
                         const Sp_handler *sph);
bool check_routine_level_acl(THD *thd, const char *db, const char *name,
                             const Sp_handler *sph);
bool is_acl_user(const char *host, const char *user);
int fill_schema_user_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_schema_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_table_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int fill_schema_column_privileges(THD *thd, TABLE_LIST *tables, COND *cond);
int wild_case_compare(CHARSET_INFO *cs, const char *str,const char *wildstr);

/**
  Result of an access check for an internal schema or table.
  Internal ACL checks are always performed *before* using
  the grant tables.
  This mechanism enforces that the server implementation has full
  control on its internal tables.
  Depending on the internal check result, the server implementation
  can choose to:
  - always allow access,
  - always deny access,
  - delegate the decision to the database administrator,
  by using the grant tables.
*/
enum ACL_internal_access_result
{
  /**
    Access granted for all the requested privileges,
    do not use the grant tables.
  */
  ACL_INTERNAL_ACCESS_GRANTED,
  /** Access denied, do not use the grant tables. */
  ACL_INTERNAL_ACCESS_DENIED,
  /** No decision yet, use the grant tables. */
  ACL_INTERNAL_ACCESS_CHECK_GRANT
};

/**
  Per internal table ACL access rules.
  This class is an interface.
  Per table(s) specific access rule should be implemented in a subclass.
  @sa ACL_internal_schema_access
*/
class ACL_internal_table_access
{
public:
  ACL_internal_table_access() = default;

virtual ~ACL_internal_table_access() = default;

/**
    Check access to an internal table.
    When a privilege is granted, this method add the requested privilege
    to save_priv.
    @param want_access the privileges requested
    @param [in, out] save_priv the privileges granted
    @return
      @retval ACL_INTERNAL_ACCESS_GRANTED All the requested privileges
      are granted, and saved in save_priv.
      @retval ACL_INTERNAL_ACCESS_DENIED At least one of the requested
      privileges was denied.
      @retval ACL_INTERNAL_ACCESS_CHECK_GRANT No requested privilege
      was denied, and grant should be checked for at least one
      privilege. Requested privileges that are granted, if any, are saved
      in save_priv.
  */
  virtual ACL_internal_access_result check(privilege_t want_access,
                                           privilege_t *save_priv) const= 0;
};

/**
  Per internal schema ACL access rules.
  This class is an interface.
  Each per schema specific access rule should be implemented
  in a different subclass, and registered.
  Per schema access rules can control:
  - every schema privileges on schema.*
  - every table privileges on schema.table
  @sa ACL_internal_schema_registry
*/
class ACL_internal_schema_access
{
public:
  ACL_internal_schema_access() = default;

virtual ~ACL_internal_schema_access() = default;

/**
    Check access to an internal schema.
    @param want_access the privileges requested
    @param [in, out] save_priv the privileges granted
    @return
      @retval ACL_INTERNAL_ACCESS_GRANTED All the requested privileges
      are granted, and saved in save_priv.
      @retval ACL_INTERNAL_ACCESS_DENIED At least one of the requested
      privileges was denied.
      @retval ACL_INTERNAL_ACCESS_CHECK_GRANT No requested privilege
      was denied, and grant should be checked for at least one
      privilege. Requested privileges that are granted, if any, are saved
      in save_priv.
  */
  virtual ACL_internal_access_result check(privilege_t want_access,
                                           privilege_t *save_priv) const= 0;

/**
    Search for per table ACL access rules by table name.
    @param name the table name
    @return per table access rules, or NULL
  */
  virtual const ACL_internal_table_access *lookup(const char *name) const= 0;
};

/**
  A registry for per internal schema ACL.
  An 'internal schema' is a database schema maintained by the
  server implementation, such as 'performance_schema' and 'INFORMATION_SCHEMA'.
*/
class ACL_internal_schema_registry
{
public:
  static void register_schema(const LEX_CSTRING *name,
                              const ACL_internal_schema_access *access);
  static const ACL_internal_schema_access *lookup(const char *name);
};

const ACL_internal_schema_access *
get_cached_schema_access(GRANT_INTERNAL_INFO *grant_internal_info,
                         const char *schema_name);

const ACL_internal_table_access *
get_cached_table_access(GRANT_INTERNAL_INFO *grant_internal_info,
                        const char *schema_name,
                        const char *table_name);

bool acl_check_proxy_grant_access (THD *thd, const char *host, const char *user,
                                   bool with_grant);
int acl_setrole(THD *thd, const char *rolename, privilege_t access);
int acl_check_setrole(THD *thd, const char *rolename, privilege_t *access);
int acl_check_set_default_role(THD *thd, const char *host, const char *user,
                               const char *role);
int acl_set_default_role(THD *thd, const char *host, const char *user,
                         const char *rolename);

extern SHOW_VAR acl_statistics[];

/* Check if a role is granted to a user/role.

If hostname == NULL, search for a role as the starting grantee.
*/
bool check_role_is_granted(const char *username,
                           const char *hostname,
                           const char *rolename);

#ifndef DBUG_OFF
extern ulong role_global_merges, role_db_merges, role_table_merges,
             role_column_merges, role_routine_merges;
#endif

class Sql_cmd_grant: public Sql_cmd
{
protected:
  enum_sql_command m_command;
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  void warn_hostname_requires_resolving(THD *thd, List<LEX_USER> &list);
  bool user_list_reset_mqh(THD *thd, List<LEX_USER> &list);
  void grant_stage0(THD *thd);
#endif
public:
  Sql_cmd_grant(enum_sql_command command)
   :m_command(command)
  { }
  bool is_revoke() const { return m_command == SQLCOM_REVOKE; }
  enum_sql_command sql_command_code() const override { return m_command; }
};

class Sql_cmd_grant_proxy: public Sql_cmd_grant
{
  privilege_t m_grant_option;
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  bool check_access_proxy(THD *thd, List<LEX_USER> &list);
#endif
public:
  Sql_cmd_grant_proxy(enum_sql_command command, privilege_t grant_option)
   :Sql_cmd_grant(command), m_grant_option(grant_option)
  { }
  bool execute(THD *thd) override;
};

class Sql_cmd_grant_object: public Sql_cmd_grant, public Grant_privilege
{
protected:
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  bool grant_stage0_exact_object(THD *thd, TABLE_LIST *table);
#endif
public:
  Sql_cmd_grant_object(enum_sql_command command, const Grant_privilege &grant)
   :Sql_cmd_grant(command), Grant_privilege(grant)
  { }
};

class Sql_cmd_grant_table: public Sql_cmd_grant_object
{
#ifndef NO_EMBEDDED_ACCESS_CHECKS
  bool execute_table_mask(THD *thd);
  bool execute_exact_table(THD *thd, TABLE_LIST *table);
#endif
public:
  Sql_cmd_grant_table(enum_sql_command command, const Grant_privilege &grant)
   :Sql_cmd_grant_object(command, grant)
  { }
  bool execute(THD *thd) override;
};

class Sql_cmd_grant_sp: public Sql_cmd_grant_object
{
  const Sp_handler &m_sph;
public:
  Sql_cmd_grant_sp(enum_sql_command command, const Grant_privilege &grant,
                   const Sp_handler &sph)
   :Sql_cmd_grant_object(command, grant),
    m_sph(sph)
  { }
  bool execute(THD *thd) override;
};

#endif /* SQL_ACL_INCLUDED */