OtterMind/Chat2DB · error · BusinessException

mysql.account.grantsUnavailable

mysql.account.grantsUnavailable

Error message

mysql.account.grantsUnavailable

What it means

Thrown by MysqlAccountManager.showGrants when the underlying 'SHOW GRANTS' query fails. The SQLException is wrapped in BusinessException('mysql.account.grantsUnavailable') so the caller receives a localized message while the original SQL error is preserved as the cause. It fires when the user cannot run SHOW GRANTS for the requested account.

Source

Thrown at chat2db-community-server/chat2db-community-plugins/chat2db-community-mysql/src/main/java/ai/chat2db/plugin/mysql/account/MysqlAccountManager.java:61

    @Override
    public List<AccountInfo> listAccounts(Connection connection) {
        try {
            return queryAccounts(connection, true);
        } catch (SQLException lockedColumnError) {
            try {
                return queryAccounts(connection, false);
            } catch (SQLException e) {
                throw new BusinessException(ERROR_KEY_ACCOUNT_LIST_UNAVAILABLE, null, e);
            }
        }
    }

    @Override
    public List<String> showGrants(Connection connection, String user, String host) {
        try {
            return queryGrants(connection, user, host);
        } catch (SQLException e) {
            throw new BusinessException(ERROR_KEY_ACCOUNT_GRANTS_UNAVAILABLE, null, e);
        }
    }

    @Override
    public AccountPreview preview(AccountOperationRequest command) {
        String sql = MysqlAccountSqlBuilder.buildSql(command);
        AccountPreview preview = new AccountPreview();
        preview.setActionType(command.getActionType());
        preview.setSql(MysqlAccountSqlBuilder.buildDisplaySql(command));
        preview.setPreviewToken(MysqlAccountSqlBuilder.previewToken(sql));
        return preview;
    }

    @Override
    public AccountExecuteResponse execute(Connection connection, AccountOperationRequest command) {
        AccountPreview preview = preview(command);
        if (!StringUtils.equals(preview.getPreviewToken(), command.getPreviewToken())) {
            throw new BusinessException(ERROR_KEY_ACCOUNT_PREVIEW_TOKEN_MISMATCH);

View on GitHub (pinned to 5ee1e990e7)

Solutions

  1. Connect with an account that has rights to inspect other users' grants (e.g. SELECT on mysql or a DBA role).
  2. Confirm the user/host pair corresponds to an existing account (listAccounts first).
  3. Inspect BusinessException.getCause() for the SQLException to distinguish 'no such account' from a privilege denial.
  4. Handle the empty/failed result gracefully in the UI rather than crashing the grants panel.

Example fix

// before
List<String> grants = accountManager.showGrants(connection, user, host);

// after
List<String> grants;
try {
    grants = accountManager.showGrants(connection, user, host);
} catch (BusinessException e) {
    if ("mysql.account.grantsUnavailable".equals(e.getCode())) {
        log.warn("Cannot load grants for {}@{}: {}", user, host, rootMessage(e.getCause()));
        grants = Collections.emptyList();
    } else {
        throw e;
    }
}
Defensive patterns

Strategy: try-catch

Validate before calling

// Confirm the account exists and the user can inspect grants before calling.
if (!accountExists(connection, user, host)) {
    return Collections.emptyList();
}

Try / catch

try {
    return accountManager.showGrants(connection, user, host);
} catch (BusinessException e) {
    if ("mysql.account.grantsUnavailable".equals(e.getCode())) {
        log.warn("grants unavailable for {}@{}: {}", user, host, rootMessage(e.getCause()));
        return Collections.emptyList();
    }
    throw e;
}

Prevention

When it happens

Trigger: showGrants(connection, user, host) where queryGrants throws: the connected user lacks privilege to view grants for the target account (SHOW GRANTS requires viewing your own grants unless you have SELECT on mysql or broader rights), the user/host arguments are malformed, or the connection dropped.

Common situations: An admin viewing another user's grants while connected as a non-privileged account; passing a host of '%' that does not match any row; a connection that lost its session; SHOW GRANTS FOR with a non-existent account returns an error.

Related errors

AI-assisted analysis of OtterMind/Chat2DB@5ee1e990e7 (2026-08-14). Data as JSON: /api/errors/d2995d4f5ad4e26c. Report an issue: GitHub.