• Sergei Golubchik's avatar
    MDEV-29668 SUPER should not allow actions that have fine-grained dedicated privileges · d6e3d89c
    Sergei Golubchik authored
    SUPER privilege used to allow various actions that were alternatively
    allowed by one of BINLOG ADMIN, BINLOG MONITOR, BINLOG REPLAY,
    CONNECTION ADMIN, FEDERATED ADMIN, REPL MASTER ADMIN, REPL SLAVE ADMIN,
    SET USER, SLAVE MONITOR.
    
    Now SUPER no longer does that, one has to grant one of the fine-grained
    privileges above to be to perform corresponding actions.
    
    On upgrade from MariaDB versions 10.11 and below all the privileges
    above are granted automatically if the user has SUPER.
    
    As a side-effect, such an upgrade will allow SUPER-user to run SHOW
    BINLOG EVENTS, SHOW RELAYLOG EVENTS, SHOW SLAVE HOSTS, even if he wasn't
    able to do it before the upgrade.
    d6e3d89c
max_connections_grant.result 1.37 KB