[MDEV-9880] SHOW WSREP_STATUS requires SUPER Created: 2016-04-06  Updated: 2016-05-05  Resolved: 2016-05-05

Status: Closed
Project: MariaDB Server
Component/s: Documentation, Galera
Affects Version/s: 10.1.13
Fix Version/s: 10.1.14

Type: Bug Priority: Minor
Reporter: Andrew Garner Assignee: Nirbhay Choubey (Inactive)
Resolution: Fixed Votes: 0
Labels: None


 Description   

SHOW WSREP_STATUS appears to require the SUPER priv. This doesn't seem to be documented here:

https://mariadb.com/kb/en/mariadb/show-wsrep_status/

Equivalent information can be pulled from "SHOW GLOBAL STATUS", with merely minimal USAGE privileges. Is there a reason to have stricter access for the information exposed via wsrep_info?

 Comments   
Comment by Nirbhay Choubey (Inactive) [ 2016-05-04 ]

andrew.garner Being part of wsrep_info plugin (which also provides membership
details), I kept its access restricted to SUPER and not give away cluster details to
non-SUPER users.
Now as you rightly pointed, cluster status info is also accessible via SHOW STATUS.
I am inclined to leave the access of WSREP_STATUS restricted to SUPER in order to
keep it open for future additions. If you agree, I will document it in KB and close this
issue.

Comment by Andrew Garner [ 2016-05-05 ]

I agree. I think this is just a documentation issue.

Comment by Nirbhay Choubey (Inactive) [ 2016-05-05 ]

Updated the KB entries.

Generated at Thu Feb 08 07:38:01 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.