Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-20577

Require lower privilege than SUPER to set rocksdb_create_checkpoint

Details

    Description

      If you want to set the rocksdb_create_checkpoint system variable, then you need the SUPER privilege. This is not exactly unexpected since it is a GLOBAL system variable.

      From the MySQL documentation:

      Setting a global system variable runtime value requires the SUPER privilege.

      https://dev.mysql.com/doc/refman/5.5/en/system-variable-privileges.html

      The problem is that Mariabackup uses this system variable to backup MyRocks data. This limitation means that MyRocks data can only be backed up by Mariabackup if the user account has the SUPER privilege. See MDEV-20564.

      This has been documented now:

      https://mariadb.com/kb/en/library/mariabackup-overview/#authentication-and-privileges

      I think some users would dislike the idea of making the backup user require SUPER privileges. Would it be possible and desirable to change MyRocks, so that a lower privilege than SUPER is required in order to set the rocksdb_create_checkpoint system variable? Should the system variable be made into a SESSION system variable?

      Attachments

        Issue Links

          Activity

            GeoffMontee Geoff Montee (Inactive) created issue -
            GeoffMontee Geoff Montee (Inactive) made changes -
            Field Original Value New Value
            GeoffMontee Geoff Montee (Inactive) made changes -
            serg Sergei Golubchik made changes -
            Comment [ Yes, see {{innodb_tmpdir}} variable and its innodb_tmpdir_validate
            function.
            ]
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            Assignee Sergei Petrunia [ psergey ] Ralf Gebhardt [ ralf.gebhardt@mariadb.com ]
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 99624 ] MariaDB v4 [ 131155 ]
            ralf.gebhardt Ralf Gebhardt made changes -
            Assignee Ralf Gebhardt [ ralf.gebhardt@mariadb.com ] Sergei Petrunia [ psergey ]
            ralf.gebhardt Ralf Gebhardt made changes -
            Priority Major [ 3 ] Minor [ 4 ]
            danblack Daniel Black made changes -
            Labels beginner-friendly

            People

              psergei Sergei Petrunia
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.