Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-29668

SUPER should not allow actions that have fine-grained dedicated privileges

Details

    Description

      After MDEV-21743 the SUPER privilege was split into many fine-grained privileges. But still, according to MDEV-21743

      The SUPER privilege as such should still remain as an alias for all these smaller privileges

      For example, to set a binlog format one needs either BINLOG ADMIN or SUPER privilege.

      This task is about removing SUPER privilege check from all these actions that have a dedicated privilege. For example, one will need to have BINLOG ADMIN to change the binlog format, SUPER will not be sufficient anymore.

      When upgrading from an older version everyone having SUPER should automatically get (for example) BINLOG ADMIN.

      See how it was done in MDEV-29596

      Attachments

        Issue Links

          Activity

            Hi serg. The patch https://github.com/MariaDB/server/commit/ae4101eb7359f148938e604634685dcf2de93135 is OK to push.

            A small cosmetic note:
            Consider preserving "--echo # Start of X.Y tests" lines, in this patch and generally.

            bar Alexander Barkov added a comment - Hi serg . The patch https://github.com/MariaDB/server/commit/ae4101eb7359f148938e604634685dcf2de93135 is OK to push. A small cosmetic note: Consider preserving "--echo # Start of X.Y tests" lines, in this patch and generally.

            see the final version in the preview-11.0-preview branch

            serg Sergei Golubchik added a comment - see the final version in the preview-11.0-preview branch
            alice Alice Sherepa added a comment -

            It is ok to push it to the main branch

            alice Alice Sherepa added a comment - It is ok to push it to the main branch

            People

              serg Sergei Golubchik
              serg Sergei Golubchik
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.