[MDEV-21858] START/STOP ALL SLAVES does not return access errors Created: 2020-03-02  Updated: 2023-04-27

Status: Open
Project: MariaDB Server
Component/s: Authentication and Privilege System, Replication
Affects Version/s: 10.1, 10.2, 10.3, 10.4
Fix Version/s: 10.4

Type: Bug Priority: Major
Reporter: Elena Stepanova Assignee: Alexander Barkov
Resolution: Unresolved Votes: 0
Labels: None


 Description   

MariaDB [(none)]> show grants;
+---------------------------------------+
| Grants for u@localhost                |
+---------------------------------------+
| GRANT USAGE ON *.* TO `u`@`localhost` |
+---------------------------------------+
1 row in set (0.000 sec)
 
MariaDB [(none)]> stop slave;
ERROR 1045 (28000): Access denied for user 'u'@'localhost' (using password: NO)
MariaDB [(none)]> stop all slaves;
Query OK, 0 rows affected (0.000 sec)

Same with start all slaves.
The commands don't actually do anything if the user is unprivileged, so there is no security problem, but I suppose they should be returning the error rather than silently do nothing.


Generated at Thu Feb 08 09:10:20 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.