• Nuno Carvalho's avatar
    WL#6236: Allow SHOW MASTER LOGS and SHOW BINARY LOGS with REPLICATION CLIENT · 448c3d62
    Nuno Carvalho authored
    Currently SHOW MASTER LOGS and SHOW BINARY LOGS require the SUPER
    privilege. Monitoring tools (such as MEM) often want to check this 
    output - for instance MEM generates the SUM of the sizes of the logs 
    reported here, and puts that in the Replication overview within the MEM
    Dashboard.
    However, because of the SUPER requirement, these tools often have an 
    account that holds open the connection whilst monitoring, and can lock
    out administrators when the server gets overloaded and reaches
    max_connections - there is already another SUPER privileged account
    connected, the "monitor". 
    
    As SHOW MASTER STATUS, and all other replication related statements,
    return with either REPLICATION CLIENT or SUPER privileges, this worklog 
    is to make SHOW MASTER LOGS and SHOW BINARY LOGS be consistent with this
    as well, and allow both of these commands with either SUPER or 
    REPLICATION CLIENT. 
    This allows monitoring tools to not require a SUPER privilege any more,
    so is safer in overloaded situations, as well as being more secure, as 
    lighter privileges can be given to users of such tools or scripts.
    448c3d62
binlog_grant.test 1.82 KB