Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-633

Galera Monitor should not require the REPLICATION CLIENT privilege

    XMLWordPrintable

Details

    Description

      The Galera monitor itself does not need the REPLICATION CLIENT privilege, since it has no reason to execute SHOW SLAVE STATUS. Nevertheless, core/monitor.c contains a hardcoded check for this privileged used for all modules.

      Granting unnecessary privileges is a security risk, so advice to do so should be avoided.

      The permissions required for each monitor should probably be defined by each monitor, not in a central location.

      Attachments

        Activity

          People

            markus makela markus makela
            kolbe Kolbe Kegel (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0d
                0d
                Logged:
                Time Spent - 1d 3h
                1d 3h

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.