Details
-
Bug
-
Status: Done
-
Medium
-
Resolution: Done
-
8.0.x, Not 5.5.x, Not 5.6.x, Not 5.7.x
-
None
Description
Upstream LOCK INSTANCE FOR BACKUP uses new-in-8.0 BACKUP_ADMIN privilege. Existing 5.7 installations grant this privilege to users that had RELOAD privilege automatically. Our backup locks should use the same privilege.
Not tested MTR for main.backup_locks:
--echo # --echo # End of 5.7 tests --echo # --echo # 8.0: LOCK TABLES FOR BACKUP should require BACKUP_ADMIN instead of RELOAD CREATE USER [email protected]; --connect (con3, localhost, u1) --error ER_SPECIFIC_ACCESS_DENIED_ERROR LOCK TABLES FOR BACKUP; --connection default GRANT SUPER TO [email protected]; --connection con3 --error ER_SPECIFIC_ACCESS_DENIED_ERROR LOCK TABLES FOR BACKUP; --connection default REVOKE SUPER FROM [email protected]; GRANT BACKUP_ADMIN TO [email protected]; --connection con3 LOCK TABLES FOR BACKUP; UNLOCK TABLES; --disconnect con3 --connection default DROP USER [email protected];
Attachments
Issue Links
- has to be finished together with
-
PS-273 Feature frozen Percona Server 8.0
-
- Done
-