Uploaded image for project: 'Percona Server for MySQL'
  1. Percona Server for MySQL
  2. PS-5014

LOCK TABLES FOR BACKUP should depend on BACKUP_ADMIN instead of RELOAD

Details

    • Bug
    • Status: Done
    • Medium
    • Resolution: Done
    • 8.0.x, Not 5.5.x, Not 5.6.x, Not 5.7.x
    • 8.0.13-3
    • None

    Description

      Upstream LOCK INSTANCE FOR BACKUP uses new-in-8.0 BACKUP_ADMIN privilege. Existing 5.7 installations grant this privilege to users that had RELOAD privilege automatically. Our backup locks should use the same privilege.

      Not tested MTR for main.backup_locks:

      --echo #
      --echo # End of 5.7 tests
      --echo #
      
      --echo # 8.0: LOCK TABLES FOR BACKUP should require BACKUP_ADMIN instead of RELOAD
      CREATE USER [email protected];
      --connect (con3, localhost, u1)
      --error ER_SPECIFIC_ACCESS_DENIED_ERROR
      LOCK TABLES FOR BACKUP;
      
      --connection default
      GRANT SUPER TO [email protected];
      
      --connection con3
      --error ER_SPECIFIC_ACCESS_DENIED_ERROR
      LOCK TABLES FOR BACKUP;
      
      --connection default
      REVOKE SUPER FROM [email protected];
      GRANT BACKUP_ADMIN TO [email protected];
      
      --connection con3
      LOCK TABLES FOR BACKUP;
      UNLOCK TABLES;
      --disconnect con3
      
      --connection default
      DROP USER [email protected];
      

      Attachments

        Issue Links

          Activity

            People

              przemyslaw.skibinski Przemyslaw Skibinski
              laurynas.biveinis Laurynas Biveinis (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 3 hours, 1 minute
                  3h 1m

                  Smart Checklist