Details
-
Task
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
None
Description
MariaDB privilege system grants all privilges directly to super user, which will cause unrecoverable issues by accident. For example:
1. User with super privilege can revoke super from himself. This can cause no user to perform operations like "set global variables", etc. Such issue also applies for other privileges.
2. If a user with cooresponding privileges happens to delete mysql database by accident, the server will fail to start up after restart.
A proper solution is to introduce role based access control for MariaDB privilege system. Only users assigned with certain roles can perform corresponding operation which super user can do the assignment.
Attachments
Issue Links
- is duplicated by
-
MDEV-4397 Roles
- Closed