Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8598

failed MySQL DDL commands and Galera replication

Details

    Description

      We have observed that galera cluster replicates commands on all other nodes when it was actually refused on one node due to lack of database permissions:

      Steps to reproduce this issue:

      Set up 3x nodes cluster (db01, db02 and db03):

       
      		 
      -- Add database user account with following permissions:
      		 
       
      		 
       GRANT SELECT, INSERT, UPDATE, DELETE ON `test`.* TO 'iayyaz'@'%' identified by '123';
      		 
       
      		 
      -- Create dummy database + table
      		 
       
      		 
      CREATE DATABASE test;
      		 
      USE test;
      		 
      create table t1 (a int);

      – Login using user 'iayyaz' to node 'db01'
      – Issue following commands:

       
      		 
      rename table t1 to t2;
      		 
      (this command would fail due to lack of permissions)
      		 
      ERROR 1142 (42000): DROP, ALTER command denied to user 'iayyaz'@'10.10.16.7' for table 't1'
      		 
       

      – Login to node 'db02'
      You would find table has been renamed:

      MariaDB [test]> show tables;
      		 
      +----------------+
      		 
      | Tables_in_test |
      		 
      +----------------+
      		 
      | t2             |
      		 
      +----------------+
      		 
      1 row in set (0.00 sec)
      		 
       

      Attachments

        Activity

          Ascending order - Click to sort in descending order
          aftab.khan aftab khan added a comment -

          This is a serious issue, once table has been renamed on other nodes i,e, db02 and db03, Now if we issue DML on db01:

          INSERT INTO t1 values (1); # This operation would succeed here but would cause db02/03 to crash

          aftab.khan aftab khan added a comment - This is a serious issue, once table has been renamed on other nodes i,e, db02 and db03, Now if we issue DML on db01: INSERT INTO t1 values (1); # This operation would succeed here but would cause db02/03 to crash
          nirbhay_c Nirbhay Choubey (Inactive) added a comment -

          https://github.com/MariaDB/server/commit/e998dffde7af2ac8b751b7d4ad22fd4bf08489f9

          nirbhay_c Nirbhay Choubey (Inactive) added a comment - https://github.com/MariaDB/server/commit/e998dffde7af2ac8b751b7d4ad22fd4bf08489f9

          People

            nirbhay_c Nirbhay Choubey (Inactive)
            aftab.khan aftab khan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.