MariaDB Server currently supports several privilege aliases:
- READ ONLY ADMIN is an alias for READ_ONLY ADMIN.
- REPLICATION REPLICA is an alias for REPLICATION SLAVE.
- REPLICATION REPLICA ADMIN is an alias for REPLICATION SLAVE ADMIN.
- REPLICATION CLIENT is an alias for BINLOG MONITOR.
However, these privilege aliases do not seem to be present in SHOW PRIVILEGES:
MariaDB [(none)]> SHOW PRIVILEGES;
|
+--------------------------+---------------------------------------+--------------------------------------------------------------------+
|
| Privilege | Context | Comment |
|
+--------------------------+---------------------------------------+--------------------------------------------------------------------+
|
| Alter | Tables | To alter the table |
|
| Alter routine | Functions,Procedures | To alter or drop stored functions/procedures |
|
| Create | Databases,Tables,Indexes | To create new databases and tables |
|
| Create routine | Databases | To use CREATE FUNCTION/PROCEDURE |
|
| Create temporary tables | Databases | To use CREATE TEMPORARY TABLE |
|
| Create view | Tables | To create new views |
|
| Create user | Server Admin | To create new users |
|
| Delete | Tables | To delete existing rows |
|
| Delete history | Tables | To delete versioning table historical rows |
|
| Drop | Databases,Tables | To drop databases, tables, and views |
|
| Event | Server Admin | To create, alter, drop and execute events |
|
| Execute | Functions,Procedures | To execute stored routines |
|
| File | File access on server | To read and write files on the server |
|
| Grant option | Databases,Tables,Functions,Procedures | To give to other users those privileges you possess |
|
| Index | Tables | To create or drop indexes |
|
| Insert | Tables | To insert data into tables |
|
| Lock tables | Databases | To use LOCK TABLES (together with SELECT privilege) |
|
| Process | Server Admin | To view the plain text of currently executing queries |
|
| Proxy | Server Admin | To make proxy user possible |
|
| References | Databases,Tables | To have references on tables |
|
| Reload | Server Admin | To reload or refresh tables, logs and privileges |
|
| Binlog admin | Server | To purge binary logs |
|
| Binlog monitor | Server | To use SHOW BINLOG STATUS and SHOW BINARY LOG |
|
| Replication master admin | Server | To monitor connected slaves |
|
| Replication slave admin | Server | To start/monitor/stop slave and apply binlog events |
|
| Replication slave | Server Admin | To read binary log events from the master |
|
| Select | Tables | To retrieve rows from table |
|
| Show databases | Server Admin | To see all databases with SHOW DATABASES |
|
| Show view | Tables | To see views with SHOW CREATE VIEW |
|
| Shutdown | Server Admin | To shut down the server |
|
| Super | Server Admin | To use KILL thread, SET GLOBAL, CHANGE MASTER, etc. |
|
| Trigger | Tables | To use triggers |
|
| Create tablespace | Server Admin | To create/alter/drop tablespaces |
|
| Update | Tables | To update existing rows |
|
| Set user | Server | To create views and stored routines with a different definer |
|
| Federated admin | Server | To execute the CREATE SERVER, ALTER SERVER, DROP SERVER statements |
|
| Connection admin | Server | To bypass connection limits and kill other users' connections |
|
| Read_only admin | Server | To perform write operations even if @@read_only=ON |
|
| Usage | Server Admin | No privileges - allow connect only |
|
+--------------------------+---------------------------------------+--------------------------------------------------------------------+
|
39 rows in set (0.008 sec)
|
{"report":{"fcp":908.6000001430511,"ttfb":381.60000014305115,"pageVisibility":"visible","entityId":94728,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":1,"journeyId":"b8332764-7c81-4746-8859-c4d8a0a50463","navigationType":0,"readyForUser":995.5,"redirectCount":0,"resourceLoadedEnd":1153.1000001430511,"resourceLoadedStart":387.80000019073486,"resourceTiming":[{"duration":17.09999990463257,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":387.80000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":387.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":404.90000009536743,"responseStart":0,"secureConnectionStart":0},{"duration":17.700000047683716,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":388,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":388,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":405.7000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":70.09999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":388.30000019073486,"connectEnd":388.30000019073486,"connectStart":388.30000019073486,"domainLookupEnd":388.30000019073486,"domainLookupStart":388.30000019073486,"fetchStart":388.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":388.30000019073486,"responseEnd":458.40000009536743,"responseStart":458.40000009536743,"secureConnectionStart":388.30000019073486},{"duration":122.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":388.30000019073486,"connectEnd":388.30000019073486,"connectStart":388.30000019073486,"domainLookupEnd":388.30000019073486,"domainLookupStart":388.30000019073486,"fetchStart":388.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":388.30000019073486,"responseEnd":510.80000019073486,"responseStart":510.80000019073486,"secureConnectionStart":388.30000019073486},{"duration":126.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":388.40000009536743,"connectEnd":388.40000009536743,"connectStart":388.40000009536743,"domainLookupEnd":388.40000009536743,"domainLookupStart":388.40000009536743,"fetchStart":388.40000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":388.40000009536743,"responseEnd":514.9000000953674,"responseStart":514.9000000953674,"secureConnectionStart":388.40000009536743},{"duration":126.80000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":388.5,"connectEnd":388.5,"connectStart":388.5,"domainLookupEnd":388.5,"domainLookupStart":388.5,"fetchStart":388.5,"redirectEnd":0,"redirectStart":0,"requestStart":388.5,"responseEnd":515.3000001907349,"responseStart":515.3000001907349,"secureConnectionStart":388.5},{"duration":127,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":388.60000014305115,"connectEnd":388.60000014305115,"connectStart":388.60000014305115,"domainLookupEnd":388.60000014305115,"domainLookupStart":388.60000014305115,"fetchStart":388.60000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":388.60000014305115,"responseEnd":515.6000001430511,"responseStart":515.6000001430511,"secureConnectionStart":388.60000014305115},{"duration":128.5,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":388.7000000476837,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":388.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":517.2000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":127.29999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":388.80000019073486,"connectEnd":388.80000019073486,"connectStart":388.80000019073486,"domainLookupEnd":388.80000019073486,"domainLookupStart":388.80000019073486,"fetchStart":388.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":388.80000019073486,"responseEnd":516.1000001430511,"responseStart":516.1000001430511,"secureConnectionStart":388.80000019073486},{"duration":128.40000009536743,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":388.90000009536743,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":388.90000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":517.3000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":127.59999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":389.10000014305115,"connectEnd":389.10000014305115,"connectStart":389.10000014305115,"domainLookupEnd":389.10000014305115,"domainLookupStart":389.10000014305115,"fetchStart":389.10000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":389.10000014305115,"responseEnd":516.7000000476837,"responseStart":516.7000000476837,"secureConnectionStart":389.10000014305115},{"duration":700.7999999523163,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":390.2000000476837,"connectEnd":390.2000000476837,"connectStart":390.2000000476837,"domainLookupEnd":390.2000000476837,"domainLookupStart":390.2000000476837,"fetchStart":390.2000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":390.2000000476837,"responseEnd":1091,"responseStart":1091,"secureConnectionStart":390.2000000476837},{"duration":696.7000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":394.7000000476837,"connectEnd":394.7000000476837,"connectStart":394.7000000476837,"domainLookupEnd":394.7000000476837,"domainLookupStart":394.7000000476837,"fetchStart":394.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":394.7000000476837,"responseEnd":1091.4000000953674,"responseStart":1091.4000000953674,"secureConnectionStart":394.7000000476837},{"duration":391.2000000476837,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":699.4000000953674,"connectEnd":699.4000000953674,"connectStart":699.4000000953674,"domainLookupEnd":699.4000000953674,"domainLookupStart":699.4000000953674,"fetchStart":699.4000000953674,"redirectEnd":0,"redirectStart":0,"requestStart":699.4000000953674,"responseEnd":1090.6000001430511,"responseStart":1090.6000001430511,"secureConnectionStart":699.4000000953674},{"duration":207.5,"initiatorType":"script","name":"https://www.google-analytics.com/analytics.js","startTime":885.1000001430511,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":885.1000001430511,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1092.6000001430511,"responseStart":0,"secureConnectionStart":0},{"duration":24.59999990463257,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":1094.3000001907349,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":1094.3000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1118.9000000953674,"responseStart":0,"secureConnectionStart":0},{"duration":41.299999952316284,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":1095.3000001907349,"connectEnd":1095.3000001907349,"connectStart":1095.3000001907349,"domainLookupEnd":1095.3000001907349,"domainLookupStart":1095.3000001907349,"fetchStart":1095.3000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":1095.3000001907349,"responseEnd":1136.6000001430511,"responseStart":1136.6000001430511,"secureConnectionStart":1095.3000001907349},{"duration":57.40000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/f51ef5507eea4c158f257c66c93b2a3f-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/js/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":1095.7000000476837,"connectEnd":1095.7000000476837,"connectStart":1095.7000000476837,"domainLookupEnd":1095.7000000476837,"domainLookupStart":1095.7000000476837,"fetchStart":1095.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":1095.7000000476837,"responseEnd":1153.1000001430511,"responseStart":1153.1000001430511,"secureConnectionStart":1095.7000000476837}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":236,"responseStart":381,"responseEnd":386,"domLoading":385,"domInteractive":1164,"domContentLoadedEventStart":1164,"domContentLoadedEventEnd":1205,"domComplete":1330,"loadEventStart":1330,"loadEventEnd":1330,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1138.3000001907349},{"name":"bigPipe.sidebar-id.end","time":1139.2000000476837},{"name":"bigPipe.activity-panel-pipe-id.start","time":1139.3000001907349},{"name":"bigPipe.activity-panel-pipe-id.end","time":1140.8000001907349},{"name":"activityTabFullyLoaded","time":1226.2000000476837}],"measures":[],"correlationId":"e705d4f631d225","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":85,"dbReadsTimeInMs":16,"dbConnsTimeInMs":23,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
Also missing as an alias is the obvious old time one of "ALL PRIVILEGES".
Attempting to use the output of SHOW PRIVILEGES programmatically like https://github.com/MariaDB/server/commit/86a7fab1755238710ed301578554d2c7d2d10d13 to ensure that a mariadb-dump --system=users contains a portable set of grants currently requires a special case for "ALL PRIVILEGES".
The other missing aliases would be problematic if using a 10.5 mariadb-dump --system=users with the above commit against an older MariaDB version. In this case the missing grants would be marked as MySQL-8.0+ grants and be ignored on import rather than letting the compatibility later take care of the translation.
As such, I'd like to include these aliases too. ralf.gebhardt@mariadb.com, serg is that ok with you?