Uploaded image for project: 'Percona Server'
  1. Percona Server
  2. PS-5014

LOCK TABLES FOR BACKUP should depend on BACKUP_ADMIN instead of RELOAD

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Priority: Medium
    • Resolution: Done
    • Affects Version/s: 8.0, Not 5.5, Not 5.6, Not 5.7
    • Fix Version/s: 8.0.13-3
    • Component/s: None
    • Labels:

      Description

      Upstream LOCK INSTANCE FOR BACKUP uses new-in-8.0 BACKUP_ADMIN privilege. Existing 5.7 installations grant this privilege to users that had RELOAD privilege automatically. Our backup locks should use the same privilege.

      Not tested MTR for main.backup_locks:

      --echo #
      --echo # End of 5.7 tests
      --echo #
      
      --echo # 8.0: LOCK TABLES FOR BACKUP should require BACKUP_ADMIN instead of RELOAD
      CREATE USER u1@localhost;
      --connect (con3, localhost, u1)
      --error ER_SPECIFIC_ACCESS_DENIED_ERROR
      LOCK TABLES FOR BACKUP;
      
      --connection default
      GRANT SUPER TO u1@localhost;
      
      --connection con3
      --error ER_SPECIFIC_ACCESS_DENIED_ERROR
      LOCK TABLES FOR BACKUP;
      
      --connection default
      REVOKE SUPER FROM u1@localhost;
      GRANT BACKUP_ADMIN TO u1@localhost;
      
      --connection con3
      LOCK TABLES FOR BACKUP;
      UNLOCK TABLES;
      --disconnect con3
      
      --connection default
      DROP USER u1@localhost;
      

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                przemyslaw.skibinski Przemyslaw Skibinski
                Reporter:
                laurynas.biveinis Laurynas Biveinis
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 3 hours, 1 minute
                  3h 1m