Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Not a Bug
-
None
-
None
-
Not for Release Notes
Description
This is just a question, a user story.
It turns out, that when running mysql_upgrade on an older server version where ALL PRIVILEGES and the SUPER privilege still included the READ_ONLY ADMIN privilege, the READ_ONLY ADMIN privilege is kept for these users.
It caused an accidental problem, because it allowed a replica to be changed manually, which then broke replication due to a PK violation.
Anyway, my question here is: does taking away the READ_ONLY ADMIN privilege from the root user cause any subtle issues?
I already discovered that by taking this privilege away, the root user cannot give it back to itself:
REVOKE READ_ONLY ADMIN ON . FROM 'root'@'localhost';
GRANT READ_ONLY ADMIN ON . TO 'root'@'localhost';
results in
ERROR 1698 (28000): Access denied for user 'root'@'localhost'
the same error occurs for
GRANT ALL PRIVILEGES ON . FROM 'root'@'localhost';