Changes in 10.5.2

Action	Old privilege (ORed)	New privilege (ORed)	Comment
Miscelaneous
`DES_DECRYPT()` with one argument	`SUPER`	`SUPER`
Execution of `CREATE TRIGGER` `DROP TRIGGER` when binary logging is enabled even if `log-bin-trust-function-creators=0`	`SUPER`	`SUPER`
Execution of the C client function `mysql_dump_debug_info()`	`SUPER`	`SUPER`
`SET GLOBAL var` - default behavior	`SUPER`	`SUPER`
Restricted system variables
`SET {GLOBAL\|SESSION} enforce_storage_engine`	`SUPER`	`SUPER`
`SET {GLOBAL\|SESSION} log_disabled_statements`	`SUPER`	`SUPER`
`SET {GLOBAL\|SESSION} sql_log_off`	`SUPER`	`SUPER`
`SET {GLOBAL\|SESSION} debug`	`SUPER`	`SUPER`
`SET {GLOBAL\|SESSION} debug_dbug`	`SUPER`	`SUPER`
`SET SESSION debug_sync`	`SUPER`	`SUPER`
`SET SESSION timestamp` (when `--secure-timestamp=SUPER`)	`SUPER`	`SUPER`, `BINLOG REPLAY`
`SET SESSION timestamp` (when `--secure-timestamp=REPLICATION`)	(not allowed)	`BINLOG REPLAY`
SET USER
Allow to set an object definer CREATE DEFINER=user@host {TRIGGER\|VIEW\|FUNCTION\|PROCEDURE}	`SUPER`	`SUPER`, `SET USER`
If a VIEW has a `DEFINER=user@host` clause and the specified definer does not exists, then A privileged VIEW invoker gets: ERROR: The user specified as a definer ('user'@'lhost') doesn't exist An unprivileged VIEW invoker gets a generic access error, without revealing details that the definer does not exists.	`SUPER`	`SUPER`, `SET USER`
Privileges related to `--read-only`
Allow write operations even when `--read-only=1`	`SUPER`	`SUPER`, `READ_ONLY ADMIN`
`SET GLOBAL read_only`	`SUPER`	`SUPER`, `READ_ONLY ADMIN`
Privileges related to connection handling
Ignore `--init-connect`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
Ignore `--max-user-connections`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
Ignore `--max-connections`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
Ignore `--max-password-errors`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`KILL` processes owned by other users	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL connect_timeout`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL disconnect_on_expired_password`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL extra_max_connections`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL init_connect`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL max_connections`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL max_connect_errors`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL max_password_errors`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL proxy_protocol_networks`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL secure_auth`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL slow_launch_time`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
`SET GLOBAL thread_pool*`	`SUPER`	`SUPER`, `CONNECTION ADMIN`
Federated database administrating
`CREATE SERVER`	`SUPER`	`SUPER`, `FEDERATED ADMIN`
`ALTER SERVER`	`SUPER`	`SUPER`, `FEDERATED ADMIN`
`DROP SERVER`	`SUPER`	`SUPER`, `FEDERATED ADMIN`
Binary log monitoring
`SHOW BINLOG STATUS` (was `SHOW MASTER STATUS`)	`SUPER`, `REPLICATION CLIENT`	`SUPER`, `BINLOG MONITOR`	^(renamed)
`SHOW BINARY LOGS`	`SUPER`, `REPLICATION CLIENT`	`SUPER`, `BINLOG MONITOR`	^(renamed)
`SHOW BINLOG EVENTS`	`REPLICATION SLAVE`	`BINLOG MONITOR`	^{(incompatible)}
Binary log administrating
`PURGE BINLOG`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL binlog_cache_size`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL binlog_file_cache_size`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL binlog_stmt_cache_size`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL binlog_commit_wait_count`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL binlog_commit_wait_usec`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL binlog_row_metadata`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL expire_logs_days`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL log_bin_compress`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL log_bin_compress_min_len`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL log_bin_trust_function_creators`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL max_binlog_cache_size`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL max_binlog_stmt_cache_size`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL max_binlog_size`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET GLOBAL sync_binlog`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET SESSION binlog_format`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET SESSION binlog_direct_non_transactional_updates`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET SESSION binlog_annotate_row_events`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET SESSION binlog_row_image`	`SUPER`	`SUPER`, `BINLOG ADMIN`
`SET SESSION sql_log_bin`	`SUPER`	`SUPER`, `BINLOG ADMIN`
Replication master administrating
`SHOW SLAVE HOSTS`	`REPLICATION SLAVE`	`REPLICATION MASTER ADMIN`	^{(incompatible)}
`SET GLOBAL rpl_semi_sync_master_enabled`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL rpl_semi_sync_master_timeout`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL rpl_semi_sync_master_wait_no_slave`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL rpl_semi_sync_master_trace_level`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL rpl_semi_sync_master_wait_point`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL master_verify_checksum`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL gtid_binlog_state`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL server_id`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
`SET GLOBAL gtid_domain_id`	`SUPER`	`SUPER`, `REPLICATION MASTER ADMIN`
Replication slave administrating
`START SLAVE`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`STOP SLAVE`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`CHANGE MASTER`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SHOW SLAVE STATUS`	`SUPER`, `REPLICATION CLIENT`	`SUPER`, `REPLICATION SLAVE ADMIN`	^{(incompatible)}
`SHOW RELAYLOG EVENTS`	`REPLICATION SLAVE`	`REPLICATION SLAVE ADMIN`	^{(incompatible)}
`SET GLOBAL replicate_events_marked_for_skip`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL replicate_do_db`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL replicate_do_table`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL replicate_ignore_db`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL replicate_ignore_table`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL replicate_wild_do_table`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL replicate_wild_ignore_table`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL read_binlog_speed_limit`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_compressed_protocol`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_ddl_exec_mode`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_domain_parallel_threads`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_exec_mode`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_max_allowed_packet`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_net_timeout`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_parallel_max_queued`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_parallel_mode`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_parallel_threads`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_parallel_workers`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_run_triggers_for_rbr`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_sql_verify_checksum`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_transaction_retry_interval`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL slave_type_conversions`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL init_slave`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL rpl_semi_sync_slave_enabled`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL rpl_semi_sync_slave_trace_level`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL rpl_semi_sync_slave_delay_master`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL rpl_semi_sync_slave_kill_conn_timeout`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL relay_log_purge`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL relay_log_recovery`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL sync_master_info`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL sync_relay_log`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL sync_relay_log_info`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL gtid_cleanup_batch_size`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL gtid_ignore_duplicates`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL gtid_pos_auto_engines`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL gtid_slave_pos`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
`SET GLOBAL gtid_strict_mode`	`SUPER`	`SUPER`, `REPLICATION SLAVE ADMIN`
Replication IO
`COM_REGISTER_SLAVE`	`REPLICATION SLAVE`	`REPLICATION SLAVE`
`COM_BINLOG_DUMP`	`REPLICATION SLAVE`	`REPLICATION SLAVE`
Binary log replaying
`BINLOG` `'...'`	`SUPER`	`SUPER`, `BINLOG REPLAY`
`SET SESSION gtid_seq_no`	`SUPER`	`SUPER`, `BINLOG REPLAY`
`SET SESSION pseudo_thread_id`	`SUPER`	`SUPER`, `BINLOG REPLAY`
`SET SESSION server_id`	`SUPER`	`SUPER`, `BINLOG REPLAY`
`SET SESSION gtid_domain_id`	`SUPER`	`SUPER`, `BINLOG REPLAY`

Comments:

(incompatible) - `SHOW BINLOG EVENTS` was moved from `REPLICATION SLAVE` to `BINLOG MONITOR`. This is an incompatible change.
(incompatible) - `SHOW SLAVE HOSTS` was moved from `REPLICATION SLAVE` to `REPLICATION MASTER ADMIN`. This is an incompatible change.
(incompatible) - `SHOW SLAVE STATUS` was moved from `REPLICATION CLIENT` to `REPLICATION SLAVE ADMIN`. This is an incompatible change.
(incompatible) - `SHOW RELAYLOG EVENTS` was moved from `REPLICATION SLAVE` to `REPLICATION SLAVE ADMIN`. This is an incompatible change.
(renamed) - `REPLICATION CLIENT` was renamed to `BINLOG MONITOR`.