Details
-
Bug
-
Status: Closed (View Workflow)
-
Minor
-
Resolution: Fixed
-
10.1.25
-
None
-
CentOS7 on Google Compute Engine
Description
For security reasons it would be great if we did not have to grant FILE permission to everyone who uses a CONNECT JDBC table. Currently we have to grant FILE to all users, even non-administrators, which increases the chance of data being leaked by accident. We do use secure_file_priv to help this, but ideally no user would need FILE priv, or if that isn't possible for some reason, at least not require FILE to use a connect JDBC table.
Attachments
Issue Links
- is duplicated by
-
MDEV-4500 ConnectSE: Excessive FILE privilege requirement for read-only operations
- Open