Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8598

failed MySQL DDL commands and Galera replication

    XMLWordPrintable

    Details

      Description

      We have observed that galera cluster replicates commands on all other nodes when it was actually refused on one node due to lack of database permissions:

      Steps to reproduce this issue:

      Set up 3x nodes cluster (db01, db02 and db03):

       
      -- Add database user account with following permissions:
       
       GRANT SELECT, INSERT, UPDATE, DELETE ON `test`.* TO 'iayyaz'@'%' identified by '123';
       
      -- Create dummy database + table
       
      CREATE DATABASE test;
      USE test;
      create table t1 (a int);

      – Login using user 'iayyaz' to node 'db01'
      – Issue following commands:

       
      rename table t1 to t2;
      (this command would fail due to lack of permissions)
      ERROR 1142 (42000): DROP, ALTER command denied to user 'iayyaz'@'10.10.16.7' for table 't1'
       

      – Login to node 'db02'
      You would find table has been renamed:

      MariaDB [test]> show tables;
      +----------------+
      | Tables_in_test |
      +----------------+
      | t2             |
      +----------------+
      1 row in set (0.00 sec)
       

        Attachments

          Activity

            People

            Assignee:
            nirbhay_c Nirbhay Choubey (Inactive)
            Reporter:
            aftab.khan aftab khan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: