executor: fix privilege issue on table `information_schema.tiflash_re…

…plica` (#45319) (#45326) close #45320
pingcap · Jul 13, 2023 · 2db988e · 2db988e
1 parent 9f3aa80
commit 2db988e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/executor/infoschema_reader.go b/executor/infoschema_reader.go
@@ -2063,6 +2063,7 @@ func (e *memtableRetriever) setDataFromSequences(ctx sessionctx.Context, schemas
 
 // dataForTableTiFlashReplica constructs data for table tiflash replica info.
 func (e *memtableRetriever) dataForTableTiFlashReplica(ctx sessionctx.Context, schemas []*model.DBInfo) {
+	checker := privilege.GetPrivilegeManager(ctx)
 	var rows [][]types.Datum
 	progressMap, err := infosync.GetTiFlashTableSyncProgress(context.Background())
 	if err != nil {
@@ -2073,6 +2074,9 @@ func (e *memtableRetriever) dataForTableTiFlashReplica(ctx sessionctx.Context, s
 			if tbl.TiFlashReplica == nil {
 				continue
 			}
+			if checker != nil && !checker.RequestVerification(ctx.GetSessionVars().ActiveRoles, schema.Name.L, tbl.Name.L, "", mysql.AllPrivMask) {
+				continue
+			}
 			progress := 1.0
 			if !tbl.TiFlashReplica.Available {
 				if pi := tbl.GetPartitionInfo(); pi != nil && len(pi.Definitions) > 0 {