Details
-
Task
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
Description
After MDEV-21743 the SUPER privilege was split into many fine-grained privileges. But still, according to MDEV-21743
The SUPER privilege as such should still remain as an alias for all these smaller privileges
For example, to set a binlog format one needs either BINLOG ADMIN or SUPER privilege.
This task is about removing SUPER privilege check from all these actions that have a dedicated privilege. For example, one will need to have BINLOG ADMIN to change the binlog format, SUPER will not be sufficient anymore.
When upgrading from an older version everyone having SUPER should automatically get (for example) BINLOG ADMIN.
See how it was done in MDEV-29596
Attachments
Issue Links
- causes
-
MDEV-30582 GRANT replication from 10.x to 11.x
- Open
- relates to
-
MDEV-21743 Split up SUPER privilege to smaller privileges
- Closed
-
MDEV-29596 Separate SUPER and READ ONLY ADMIN privileges
- Closed