Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-37925

Is there any adverse effect if READ_ONLY ADMIN privilege is taken away from the root user?

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Not a Bug
    • None
    • N/A
    • N/A
    • None
    • Not for Release Notes

    Description

      This is just a question, a user story.

      It turns out, that when running mysql_upgrade on an older server version where ALL PRIVILEGES and the SUPER privilege still included the READ_ONLY ADMIN privilege, the READ_ONLY ADMIN privilege is kept for these users.

      It caused an accidental problem, because it allowed a replica to be changed manually, which then broke replication due to a PK violation.

      Anyway, my question here is: does taking away the READ_ONLY ADMIN privilege from the root user cause any subtle issues?

      I already discovered that by taking this privilege away, the root user cannot give it back to itself:
      REVOKE READ_ONLY ADMIN ON . FROM 'root'@'localhost';

      GRANT READ_ONLY ADMIN ON . TO 'root'@'localhost';
      results in
      ERROR 1698 (28000): Access denied for user 'root'@'localhost'

      the same error occurs for
      GRANT ALL PRIVILEGES ON . FROM 'root'@'localhost';

      Attachments

        Activity

          People

            danblack Daniel Black
            zboszor Zoltán Böszörményi
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.