[MDEV-8434] MariaDB Galera not replicating GRANTS of roles to users Created: 2015-07-07  Updated: 2015-07-11  Resolved: 2015-07-11

Status: Closed
Project: MariaDB Server
Component/s: wsrep
Affects Version/s: 10.0.15-galera
Fix Version/s: 10.0.21-galera

Type: Bug Priority: Major
Reporter: Rasmus Johansson (Inactive) Assignee: Nirbhay Choubey (Inactive)
Resolution: Duplicate Votes: 0
Labels: galera, roles


 Description   

From a user: We use Galera, MariaDB and MariaDB roles, and Galera refuses to sync the GRANTS of roles to users. We have a separate user for each account where we need to apply the security role, and with a multi-master setup (Galera), the roles won’t get synced to each node, leaving the security model broken (so some users will have read/write permissions only on one of the nodes). The role is already replicated, only the GRANT for USER is not replicated, so hope that latest MariaDB (10.1.5) with Galera sets the role. The trick-shot here being that in 10.1.1 you added the “DEFAULT ROLE” feature which means that one doesn’t need to GRANT roleX to userY, you and one do it automatically at user setup (hoping that the user setup with a default role is replicated). But 10.1.5 is still a BETA now, so I can’t use it in production yet. We could potentially have workaround for now and wait until the problem gets fixed.



 Comments   
Comment by Rasmus Johansson (Inactive) [ 2015-07-07 ]

cvicentiu and nirbhay_c could you take a look at this and determine in whose area this falls.

Comment by Nirbhay Choubey (Inactive) [ 2015-07-07 ]

Looks related to MDEV-8383. Assigned to myself.

Comment by Nirbhay Choubey (Inactive) [ 2015-07-11 ]

Duplicate of MDEV-8383

Comment by Nirbhay Choubey (Inactive) [ 2015-07-11 ]

https://github.com/MariaDB/server/commit/6771b818a38a72e89d318eb9f1f3a2b8a64f0d5f

Generated at Thu Feb 08 07:27:08 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.