Details
-
New Feature
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
Description
We generally need to rethink the access control model for servers (entities, created by CREATE SERVER). Currently FEDERATED ADMIN is needed to create/alter/drop/show servers, but using them is open to everyone.
Perhaps we need privileges on servers, like (just an example)
GRANT FEDERATED CREATE ON SERVER foo TO user@host; |
which would allow using the server in CREATE TABLE. Here SELECT/INSERT/UPDATE/DELETE to the remote server is controlled by usual privileges on the table that uses a specific server, so there is no need for FEDERATED INSERT and other similar privileges.
This becomes even more important if we'll use servers for more than Federated and Spider.