Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-41702

Add a privilege for using a server definition made by CREATE SERVER

    XMLWordPrintable

Details

    Description

      We generally need to rethink the access control model for servers (entities, created by CREATE SERVER). Currently FEDERATED ADMIN is needed to create/alter/drop/show servers, but using them is open to everyone.

      Perhaps we need privileges on servers, like (just an example)

      GRANT FEDERATED CREATE ON SERVER foo TO user@host;
      

      which would allow using the server in CREATE TABLE. Here SELECT/INSERT/UPDATE/DELETE to the remote server is controlled by usual privileges on the table that uses a specific server, so there is no need for FEDERATED INSERT and other similar privileges.

      This becomes even more important if we'll use servers for more than Federated and Spider.

      Attachments

        Activity

          People

            serg Sergei Golubchik
            Roel Roel Van de Paar
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - Not Specified
                Not Specified
                Logged:
                Time Spent - 0.25h
                0.25h

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.