Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8598

failed MySQL DDL commands and Galera replication

Details

    Description

      We have observed that galera cluster replicates commands on all other nodes when it was actually refused on one node due to lack of database permissions:

      Steps to reproduce this issue:

      Set up 3x nodes cluster (db01, db02 and db03):

       
      		 
      -- Add database user account with following permissions:
      		 
       
      		 
       GRANT SELECT, INSERT, UPDATE, DELETE ON `test`.* TO 'iayyaz'@'%' identified by '123';
      		 
       
      		 
      -- Create dummy database + table
      		 
       
      		 
      CREATE DATABASE test;
      		 
      USE test;
      		 
      create table t1 (a int);

      – Login using user 'iayyaz' to node 'db01'
      – Issue following commands:

       
      		 
      rename table t1 to t2;
      		 
      (this command would fail due to lack of permissions)
      		 
      ERROR 1142 (42000): DROP, ALTER command denied to user 'iayyaz'@'10.10.16.7' for table 't1'
      		 
       

      – Login to node 'db02'
      You would find table has been renamed:

      MariaDB [test]> show tables;
      		 
      +----------------+
      		 
      | Tables_in_test |
      		 
      +----------------+
      		 
      | t2             |
      		 
      +----------------+
      		 
      1 row in set (0.00 sec)
      		 
       

      Attachments

        Activity

          People

            nirbhay_c Nirbhay Choubey (Inactive)
            aftab.khan aftab khan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.