# Tests for PERFORMANCE_SCHEMA
#
# Check that
# - a regular user can not update setup_ tables under --read-only
# - a user with SUPER privileges can

--source include/not_embedded.inc
--source include/have_perfschema.inc
--enable_connect_log

use performance_schema;

set @start_read_only= @@global.read_only;

create user pfsuser@localhost;
grant SELECT, UPDATE on performance_schema.* to pfsuser@localhost;
flush privileges;

connect (con1, localhost, pfsuser, ,"*NO-ONE*");

connection default;

set global read_only=0;

connection con1;

select @@global.read_only;
show grants;
--disable_result_log
--echo # Update on perf_schema is allowed in read_only mode.
select * from performance_schema.setup_instruments;
update performance_schema.setup_instruments set enabled='NO';
update performance_schema.setup_instruments set enabled='YES';
--enable_result_log

connection default;

set global read_only=1;

connection con1;

select @@global.read_only;
show grants;
--disable_result_log
select * from performance_schema.setup_instruments;
--enable_result_log
--error ER_OPTION_PREVENTS_STATEMENT
update performance_schema.setup_instruments set enabled='NO';
--error ER_OPTION_PREVENTS_STATEMENT
update performance_schema.setup_instruments set enabled='YES';

connection default;

grant READ_ONLY ADMIN on *.* to pfsuser@localhost;
flush privileges;

disconnect con1;
connect (con1, localhost, pfsuser, ,"*NO-ONE*");

select @@global.read_only;
show grants;
--disable_result_log
select * from performance_schema.setup_instruments;
--enable_result_log
update performance_schema.setup_instruments set enabled='NO';
update performance_schema.setup_instruments set enabled='YES';

disconnect con1;
connection default;

set global read_only= @start_read_only;

drop user pfsuser@localhost;
flush privileges;