mirror of
https://github.com/MariaDB/server.git
synced 2025-01-16 12:02:42 +01:00
d6e3d89c80
SUPER privilege used to allow various actions that were alternatively allowed by one of BINLOG ADMIN, BINLOG MONITOR, BINLOG REPLAY, CONNECTION ADMIN, FEDERATED ADMIN, REPL MASTER ADMIN, REPL SLAVE ADMIN, SET USER, SLAVE MONITOR. Now SUPER no longer does that, one has to grant one of the fine-grained privileges above to be to perform corresponding actions. On upgrade from MariaDB versions 10.11 and below all the privileges above are granted automatically if the user has SUPER. As a side-effect, such an upgrade will allow SUPER-user to run SHOW BINLOG EVENTS, SHOW RELAYLOG EVENTS, SHOW SLAVE HOSTS, even if he wasn't able to do it before the upgrade.
37 lines
1.1 KiB
Text
37 lines
1.1 KiB
Text
#
|
|
# Start of 10.5 tests
|
|
#
|
|
#
|
|
# MDEV-21975 Add BINLOG REPLAY privilege and bind new privileges to gtid_seq_no, preudo_thread_id, server_id, gtid_domain_id
|
|
#
|
|
#
|
|
# Test that binlog replay statements are not allowed without BINLOG REPLAY
|
|
#
|
|
CREATE USER user1@localhost IDENTIFIED BY '';
|
|
GRANT ALL PRIVILEGES ON *.* TO user1@localhost;
|
|
REVOKE BINLOG REPLAY ON *.* FROM user1@localhost;
|
|
connect con1,localhost,user1,,;
|
|
connection con1;
|
|
BINLOG '';
|
|
ERROR 42000: Access denied; you need (at least one of) the BINLOG REPLAY privilege(s) for this operation
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
#
|
|
# Test that binlog replay statements are allowed with BINLOG REPLAY
|
|
#
|
|
CREATE USER user1@localhost IDENTIFIED BY '';
|
|
GRANT BINLOG REPLAY ON *.* TO user1@localhost;
|
|
SHOW GRANTS FOR user1@localhost;
|
|
Grants for user1@localhost
|
|
GRANT BINLOG REPLAY ON *.* TO `user1`@`localhost`
|
|
connect con1,localhost,user1,,;
|
|
connection con1;
|
|
BINLOG '';
|
|
ERROR 42000: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use
|
|
disconnect con1;
|
|
connection default;
|
|
DROP USER user1@localhost;
|
|
#
|
|
# End of 10.5 tests
|
|
#
|