Details
-
Task
-
Status: Open (View Workflow)
-
Minor
-
Resolution: Unresolved
-
None
Description
If you want to set the rocksdb_create_checkpoint system variable, then you need the SUPER privilege. This is not exactly unexpected since it is a GLOBAL system variable.
From the MySQL documentation:
Setting a global system variable runtime value requires the SUPER privilege.
https://dev.mysql.com/doc/refman/5.5/en/system-variable-privileges.html
The problem is that Mariabackup uses this system variable to backup MyRocks data. This limitation means that MyRocks data can only be backed up by Mariabackup if the user account has the SUPER privilege. See MDEV-20564.
This has been documented now:
https://mariadb.com/kb/en/library/mariabackup-overview/#authentication-and-privileges
I think some users would dislike the idea of making the backup user require SUPER privileges. Would it be possible and desirable to change MyRocks, so that a lower privilege than SUPER is required in order to set the rocksdb_create_checkpoint system variable? Should the system variable be made into a SESSION system variable?
Attachments
Issue Links
- relates to
-
MDEV-13122 Backup myrocks with mariabackup
- Closed
-
MDEV-21743 Split up SUPER privilege to smaller privileges
- Closed
-
MDEV-20564 Mariabackup docs for privileges incomplete / outdated for rocksdb backups
- Closed