[MDEV-22091] REVOKE ALL is not allowed for root - Jira

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Major
Resolution: Fixed
Affects Version/s: 10.5.2
Fix Version/s: 10.5.3
Component/s: Authentication and Privilege System
Labels:
None
Environment:
n.a.

Description

Server version:         10.5.2-MariaDB-log MariaDB Server

SQL> SELECT CURRENT_USER();

+----------------+

| CURRENT_USER() |

+----------------+

| root@localhost |

+----------------+

SQL> CREATE USER 'foo'@'bar';

SQL> REVOKE ALL PRIVILEGES ON *.* FROM 'foo'@'bar';

ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)

MariaDB 10.4.x

SQL> REVOKE ALL PRIVILEGES ON *.* FROM 'foo'@'bar';

Query OK, 0 rows affected, 1 warning (0.002 sec)

Attachments

Issue Links

duplicates

MDEV-22057 REPLICATION MASTER ADMIN is missing in root account after upgrade

Closed

Activity

Ascending order - Click to sort in descending order

Oli Sennhauser added a comment - 2020-03-31 12:00 - edited

show create user root@localhost;

+------------------------------------------------------------------------------------+

| CREATE USER for root@localhost                                                     |

+------------------------------------------------------------------------------------+

| CREATE USER `root`@`localhost` IDENTIFIED VIA mysql_native_password OR unix_socket |

+------------------------------------------------------------------------------------+

show grants for root@localhost;

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

| Grants for root@localhost                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

| GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, SHUTDOWN, PROCESS, FILE, REFERENCES, INDEX, ALTER, SHOW DATABASES, SUPER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, REPLICATION SLAVE, BINLOG MONITOR, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, CREATE USER, EVENT, TRIGGER, CREATE TABLESPACE, DELETE HISTORY, SET USER, FEDERATED ADMIN, CONNECTION ADMIN, READ_ONLY ADMIN, REPLICATION SLAVE ADMIN, BINLOG ADMIN, BINLOG REPLAY ON *.* TO `root`@`localhost` IDENTIFIED VIA mysql_native_password OR unix_socket WITH GRANT OPTION |

| GRANT PROXY ON ''@'%' TO 'root'@'localhost' WITH GRANT OPTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

Was an upgraded instance from 10.5.1 (and possibly from 10.5.0 before)

Oli Sennhauser added a comment - 2020-03-31 12:00 - edited show create user root@localhost; + ------------------------------------------------------------------------------------+ | CREATE USER for root@localhost | + ------------------------------------------------------------------------------------+ | CREATE USER `root`@`localhost` IDENTIFIED VIA mysql_native_password OR unix_socket | + ------------------------------------------------------------------------------------+ show grants for root@localhost; + ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Grants for root@localhost | + ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | GRANT SELECT , INSERT , UPDATE , DELETE , CREATE , DROP , RELOAD, SHUTDOWN, PROCESS, FILE, REFERENCES , INDEX , ALTER , SHOW DATABASES, SUPER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE , REPLICATION SLAVE, BINLOG MONITOR, CREATE VIEW , SHOW VIEW , CREATE ROUTINE, ALTER ROUTINE, CREATE USER , EVENT, TRIGGER , CREATE TABLESPACE, DELETE HISTORY, SET USER , FEDERATED ADMIN, CONNECTION ADMIN, READ_ONLY ADMIN, REPLICATION SLAVE ADMIN, BINLOG ADMIN, BINLOG REPLAY ON *.* TO `root`@`localhost` IDENTIFIED VIA mysql_native_password OR unix_socket WITH GRANT OPTION | | GRANT PROXY ON '' @ '%' TO 'root' @ 'localhost' WITH GRANT OPTION | + ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ Was an upgraded instance from 10.5.1 (and possibly from 10.5.0 before)

Elena Stepanova added a comment - 2020-03-31 12:01 - edited

The problem should be already fixed in the scope of ~~MDEV-22057~~.
Apologies for the inconvenience.

Elena Stepanova added a comment - 2020-03-31 12:01 - edited The problem should be already fixed in the scope of MDEV-22057 . Apologies for the inconvenience.

MariaDB Server

REVOKE ALL is not allowed for root

Details

Description

Attachments

Issue Links

Activity

People

Dates

Git Integration