Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18766

Add REPLICATION_SLAVE_ADMIN privilege so that MaxScale doesn't need SUPER privilege to STOP SLAVE or CHANGE MASTER

    XMLWordPrintable

    Details

      Description

      We currently require the granting of SUPER privilege to MaxScale user to allow stopping, restarting, and changing the slave. Some users object to the security risk of giving SUPER privilege for this, and would like it if MariaDB implemented something similar to MySQL's REPLICATION_SLAVE_ADMIN privilege. Since 8.0 MySQL has a series of these dynamic privileges that allow an account to manage a specific aspect of the server without opening up the account to everything. REPLICATION-SLAVE_ADMIN enables the account to connect to the master server, start and stop replication, and use the CHANGE MASTER TO and CHANGE REPLICATION FILTER statements.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              juan.vera Juan
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: