Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Duplicate
-
Affects Version/s: 10.0.15-galera
-
Fix Version/s: 10.0.21-galera
-
Component/s: wsrep
Description
From a user: We use Galera, MariaDB and MariaDB roles, and Galera refuses to sync the GRANTS of roles to users. We have a separate user for each account where we need to apply the security role, and with a multi-master setup (Galera), the roles won’t get synced to each node, leaving the security model broken (so some users will have read/write permissions only on one of the nodes). The role is already replicated, only the GRANT for USER is not replicated, so hope that latest MariaDB (10.1.5) with Galera sets the role. The trick-shot here being that in 10.1.1 you added the “DEFAULT ROLE” feature which means that one doesn’t need to GRANT roleX to userY, you and one do it automatically at user setup (hoping that the user setup with a default role is replicated). But 10.1.5 is still a BETA now, so I can’t use it in production yet. We could potentially have workaround for now and wait until the problem gets fixed.
Gliffy Diagrams
Attachments
Activity
- All
- Comments
- Work Log
- History
- Activity
- Transitions
Looks related to MDEV-8383. Assigned to myself.
Duplicate of MDEV-8383
Vicentiu Ciorbaru and Nirbhay Choubey could you take a look at this and determine in whose area this falls.