Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-22026

Document 10.5 privilege changes

    XMLWordPrintable

Details

    Description

      Let's document the changes in the privilege system made in 10.5.2.

      Summary

      MDEV-21743 (and a number of related tasks, liked to this task) made the following changes:

      • Added new privileges:
        • SET USER
        • FEDERATED ADMIN
        • CONNECTION ADMIN
        • READ_ONLY ADMIN
        • REPLICATION SLAVE ADMIN
        • REPLICATION MASTER ADMIN
        • BINLOG_ADMIN
        • BINLOG_REPLAY
      • Renamed the REPLICATION CLIENT privilege to BINLOG MONITOR. The old syntax is still understood for compatibility.
      • Renamed the SHOW MASTER STATUS statement to SHOW BINLOG STATUS. The old syntax is still understood for compatibility.
      • Modified privileges required for the following statements:
        • SHOW BINLOG EVENTS
        • SHOW SLAVE HOSTS
        • SHOW SLAVE STATUS
        • SHOW RELAYLOG EVENTS

      Please see the attached HTML file for details.

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MDEV-21743 Split up SUPER privilege to smaller privileges

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-21957 Bind BINLOG ADMIN to @@binlog_format, @@binlog_direct_.., @@sql_log_bin

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21960 Bind READ_ONLY ADMIN to @@read_only

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21961 Bind CONNECTION ADMIN to a number of global system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21963 Bind BINLOG ADMIN to a number of global system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21966 Bind REPLICATION SLAVE ADMIN to a number of global system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21967 Bind REPLICATION {MASTER|SLAVE} ADMIN to rpl_semi_sync_* variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21969 Bind REPLICATION SLAVE ADMIN to relay_log_*, sync_master_info, sync_relay_log, sync_relay_log_info

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21971 Bind BINLOG ADMIN to binlog_annotate_row_events and binlog_row_image global and session variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21972 Bind REPLICATION MASTER ADMIN to master_verify_checksum

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21973 Bind REPLICATION {MASTER|SLAVE} ADMIN to gtid_* GLOBAL-only system variables

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-21975 Add BINLOG REPLAY privilege and bind new privileges to gtid_seq_no, preudo_thread_id, server_id, gtid_domain_id

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-22012 Allow SET TIMESTAMP for users with GRANT BINLOG REPLAY when --secure-timestamp=replication

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-22030 Don't grant REPLICATION MASTER ADMIN automatically on upgrade from an older JSON user table

          • Major - Major loss of function.
          • Closed

          Activity

            People

              KennethDyer Kenneth Dyer (Inactive)
              bar Alexander Barkov
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.