Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-8598

failed MySQL DDL commands and Galera replication

        Details

          Description

          We have observed that galera cluster replicates commands on all other nodes when it was actually refused on one node due to lack of database permissions:

          Steps to reproduce this issue:

          Set up 3x nodes cluster (db01, db02 and db03):

          -- Add database user account with following permissions:

 GRANT SELECT, INSERT, UPDATE, DELETE ON `test`.* TO 'iayyaz'@'%' identified by '123';

-- Create dummy database + table

CREATE DATABASE test;
USE test;
create table t1 (a int);

          – Login using user 'iayyaz' to node 'db01'
          – Issue following commands:

          rename table t1 to t2;
(this command would fail due to lack of permissions)
ERROR 1142 (42000): DROP, ALTER command denied to user 'iayyaz'@'10.10.16.7' for table 't1'

          – Login to node 'db02'
          You would find table has been renamed:

          MariaDB [test]> show tables;
+----------------+
| Tables_in_test |
+----------------+
| t2             |
+----------------+
1 row in set (0.00 sec)

            Gliffy Diagrams

              Attachments

                Activity

                Ascending order - Click to sort in descending order
                Hide
                Permalink
                aftab.khan aftab khan added a comment -

                This is a serious issue, once table has been renamed on other nodes i,e, db02 and db03, Now if we issue DML on db01:

                INSERT INTO t1 values (1); # This operation would succeed here but would cause db02/03 to crash
                Show
                aftab.khan aftab khan added a comment - This is a serious issue, once table has been renamed on other nodes i,e, db02 and db03, Now if we issue DML on db01: INSERT INTO t1 values (1); # This operation would succeed here but would cause db02/03 to crash
                Hide
                Permalink
                nirbhay_c Nirbhay Choubey added a comment -

                https://github.com/MariaDB/server/commit/e998dffde7af2ac8b751b7d4ad22fd4bf08489f9

                Show
                nirbhay_c Nirbhay Choubey added a comment - https://github.com/MariaDB/server/commit/e998dffde7af2ac8b751b7d4ad22fd4bf08489f9

                  People

                  • Assignee:
                    nirbhay_c Nirbhay Choubey
                    Reporter:
                    aftab.khan aftab khan
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    2 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: