[MDEV-23083] Replication filters provide information about schema through system variables Created: 2020-07-03  Updated: 2020-07-03

Status: Open
Project: MariaDB Server
Component/s: Authentication and Privilege System
Affects Version/s: 10.1, 10.2, 10.3, 10.4, 10.5
Fix Version/s: 10.6

Type: Bug Priority: Major
Reporter: Elena Stepanova Assignee: Sergei Golubchik
Resolution: Unresolved Votes: 0
Labels: None


 Description   

Long time ago MariaDB made replicate_do_db etc. system variables rather than just options as they were and still are in MySQL. And system variables are visible to unprivileged users.

set global replicate_do_db='db';
set global replicate_ignore_table='db.t';
create user foo;
 
--connect (con1,localhost,foo,,)
show grants;
select @@replicate_do_db, @@replicate_ignore_table;

10.5 6cee9b1953

MariaDB [test]> select @@replicate_do_db, @@replicate_ignore_table;
+-------------------+--------------------------+
| @@replicate_do_db | @@replicate_ignore_table |
+-------------------+--------------------------+
| db                | db.t                     |
+-------------------+--------------------------+
1 row in set (0.001 sec)


Generated at Thu Feb 08 09:19:43 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.