[MDEV-18766] Add REPLICATION_SLAVE_ADMIN privilege so that MaxScale doesn't need SUPER privilege to STOP SLAVE or CHANGE MASTER Created: 2019-02-28  Updated: 2020-08-25  Resolved: 2020-03-25

Status: Closed
Project: MariaDB Server
Component/s: Authentication and Privilege System
Fix Version/s: N/A

Type: Task Priority: Major
Reporter: Juan Assignee: Unassigned
Resolution: Duplicate Votes: 0
Labels: None

Issue Links:
Duplicate
duplicates MDEV-21743 Split up SUPER privilege to smaller p... Closed

 Description   

We currently require the granting of SUPER privilege to MaxScale user to allow stopping, restarting, and changing the slave. Some users object to the security risk of giving SUPER privilege for this, and would like it if MariaDB implemented something similar to MySQL's REPLICATION_SLAVE_ADMIN privilege. Since 8.0 MySQL has a series of these dynamic privileges that allow an account to manage a specific aspect of the server without opening up the account to everything. REPLICATION-SLAVE_ADMIN enables the account to connect to the master server, start and stop replication, and use the CHANGE MASTER TO and CHANGE REPLICATION FILTER statements.



 Comments   
Comment by Sergei Golubchik [ 2020-01-01 ]

done

Comment by Ralf Gebhardt [ 2020-03-25 ]

This task is covered by MDEV-21743

Generated at Thu Feb 08 08:46:34 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.