Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-21743

Split up SUPER privilege to smaller privileges

Details

    Description

      The SUPER privilege should be split up to multiple admin privileges so that more fine grained tuning of what each user can do could be applied.

      The SUPER privilege as such should still remain as an alias for all these smaller privileges

      Attachments

        Issue Links

          blocks

          New Feature - A new feature of the product, which has yet to be developed. MDEV-20299 SET SESSION AUTHORIZATION

          • Critical - Crashes, loss of data, severe memory leak.
          • In Testing
          causes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-23610 Slave user can't run "SHOW SLAVE STATUS" anymore after upgrade to 10.5, mysql_upgrade should take of that

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-24344 BINLOG REPLAY privilege is missing from SHOW PRIVILEGES

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-24362 Privilege aliases are missing from SHOW PRIVILEGES

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. MDEV-27611 CLONE - Slave user can't run "SHOW SLAVE STATUS" anymore after upgrade to 10.5, mysql_upgrade should take of that

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is blocked by

          Task - A task that needs to be done. MDEV-21689 Add Sql_cmd for GRANT/REVOKE statements

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21702 Add a data type for privileges

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21704 Add a new JSON field "version_id" into mysql.global_priv.priv

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is duplicated by

          Task - A task that needs to be done. MDEV-18766 Add REPLICATION_SLAVE_ADMIN privilege so that MaxScale doesn't need SUPER privilege to STOP SLAVE or CHANGE MASTER

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-21706 CLIENT_NO_SCHEMA: `GRANT..ON db.table..` changes the explicit database to the current

          • Major - Major loss of function.
          • Open

          Task - A task that needs to be done. MDEV-21960 Bind READ_ONLY ADMIN to @@read_only

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21961 Bind CONNECTION ADMIN to a number of global system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21963 Bind BINLOG ADMIN to a number of global system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21966 Bind REPLICATION SLAVE ADMIN to a number of global system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21967 Bind REPLICATION {MASTER|SLAVE} ADMIN to rpl_semi_sync_* variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21969 Bind REPLICATION SLAVE ADMIN to relay_log_*, sync_master_info, sync_relay_log, sync_relay_log_info

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21972 Bind REPLICATION MASTER ADMIN to master_verify_checksum

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21973 Bind REPLICATION {MASTER|SLAVE} ADMIN to gtid_* GLOBAL-only system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-22012 Allow SET TIMESTAMP for users with GRANT BINLOG REPLAY when --secure-timestamp=replication

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-22030 Don't grant REPLICATION MASTER ADMIN automatically on upgrade from an older JSON user table

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-22057 REPLICATION MASTER ADMIN is missing in root account after upgrade

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-22152 REPLICATION MASTER ADMIN privilege not given to former SUPER users upon upgrade

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-29668 SUPER should not allow actions that have fine-grained dedicated privileges

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-20577 Require lower privilege than SUPER to set rocksdb_create_checkpoint

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Task - A task that needs to be done. MDEV-21956 Add class Sys_var_charptr_fscs

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21957 Bind BINLOG ADMIN to @@binlog_format, @@binlog_direct_.., @@sql_log_bin

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21971 Bind BINLOG ADMIN to binlog_annotate_row_events and binlog_row_image global and session variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21975 Add BINLOG REPLAY privilege and bind new privileges to gtid_seq_no, preudo_thread_id, server_id, gtid_domain_id

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-22026 Document 10.5 privilege changes

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            maxmether Max Mether created issue -
            julien.fritsch Julien Fritsch made changes -
            Field Original Value New Value
            Fix Version/s 10.5 [ 23608 ]
            maxmether Max Mether made changes -
            Labels SkySQL_Cloud
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            serg Sergei Golubchik made changes -
            serg Sergei Golubchik made changes -
            Parent MENT-332 [ 78136 ]
            Issue Type Sub-Task [ 10000 ] Task [ 3 ]
            serg Sergei Golubchik made changes -
            Labels SkySQL_Cloud
            serg Sergei Golubchik made changes -
            Fix Version/s 10.5 [ 23123 ]
            Fix Version/s 10.5 [ 23608 ]
            Key MENT-595 MDEV-21743
            Project MariaDB Enterprise [ 11500 ] MariaDB Server [ 10000 ]
            serg Sergei Golubchik made changes -
            bar Alexander Barkov made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            bar Alexander Barkov made changes -
            Assignee Alexander Barkov [ bar ] Sergei Golubchik [ serg ]
            Status In Progress [ 3 ] In Review [ 10002 ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Alexander Barkov [ bar ]
            Status In Review [ 10002 ] Stalled [ 10000 ]
            bar Alexander Barkov made changes -
            Status Stalled [ 10000 ] In Progress [ 3 ]
            bar Alexander Barkov made changes -
            Assignee Alexander Barkov [ bar ] Sergei Golubchik [ serg ]
            Status In Progress [ 3 ] In Review [ 10002 ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Alexander Barkov [ bar ]
            Status In Review [ 10002 ] Stalled [ 10000 ]
            bar Alexander Barkov made changes -
            Component/s Authentication and Privilege System [ 13101 ]
            Fix Version/s 10.5.2 [ 24030 ]
            Fix Version/s 10.5 [ 23123 ]
            Resolution Fixed [ 1 ]
            Status Stalled [ 10000 ] Closed [ 6 ]
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            bar Alexander Barkov made changes -
            ralf.gebhardt Ralf Gebhardt made changes -
            ralf.gebhardt Ralf Gebhardt made changes -
            ralf.gebhardt Ralf Gebhardt made changes -
            bar Alexander Barkov made changes -
            elenst Elena Stepanova made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 102879 ] MariaDB v4 [ 134165 ]
            ThomasHuppertz Thomas Huppertz made changes -
            serg Sergei Golubchik made changes -
            rob.schwyzer@mariadb.com Rob Schwyzer (Inactive) made changes -
            rob.schwyzer@mariadb.com Rob Schwyzer (Inactive) made changes -
            mariadb-jira-automation Jira Automation (IT) made changes -
            Zendesk Related Tickets 147847

            People

              bar Alexander Barkov
              maxmether Max Mether
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.