[MDEV-18123] Users with SUPER get DELETE HISTORY privilege after upgrading Created: 2019-01-02 Updated: 2019-03-16 Resolved: 2019-03-16 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Authentication and Privilege System, Documentation |
| Affects Version/s: | 10.3.11 |
| Fix Version/s: | N/A |
| Type: | Bug | Priority: | Major |
| Reporter: | Todd Coker (Inactive) | Assignee: | Ian Gilfillan |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Environment: |
CentOS 6.10 |
||
| Description |
|
After upgrading from MariaDB 10.2.21 to MariaDB 10.3.11 users with the SUPER privilege acquire the DELETE HISTORY (aka DELETE VERSIONING ROWS) privilege. State prior to upgrade:
Steps used to perform upgrade:
After restarting but before mysql_upgrade, user still has the correct permissions:
Following mysql_upgrade, the additional privilege appears:
|
| Comments |
| Comment by Elena Stepanova [ 2019-01-02 ] | |||||||||||||||||
|
It appears to be an intentional change:
Truncate versioning was later renamed, but the logic itself remains. | |||||||||||||||||
| Comment by Ian Gilfillan [ 2019-03-16 ] | |||||||||||||||||
|
Mentioned on |