[Maria-discuss] How to give user permission to create a trigger?
Hello, we have a MariaDB 10.1 installation used for our shared hosting with a Master/Slave Replication to another MariaDB 10.1. One of our customers has a CMS that needs to create a trigger during installation and errors out about missing permission to create the trigger. I've 'googled' around and found only that granting 'SUPER' privileges does resolve this, but we can't give the customer so far reaching privileges. He is not the only using this server. Tried to do a 'grant trigger ....' for this user, the command returns without error, but the grant trigger does not show up in 'show grants....'. Probably because he as already 'all privileges' granted? Is there a way to resolve this? Kind Regards, Thomas
Is there a way to resolve this?
You should probably set the log_bin_trust_function_creators to ON. Then SUPER privilege is not required. https://mariadb.com/kb/en/replication-and-binary-log-system-variables/#log_b... rr
Am 24.02.2020 um 13:48 schrieb Reinis Rozitis:
Is there a way to resolve this? You should probably set the log_bin_trust_function_creators to ON. Then SUPER privilege is not required.
https://mariadb.com/kb/en/replication-and-binary-log-system-variables/#log_b...
rr
_______________________________________________ Mailing list: https://launchpad.net/~maria-discuss Post to : maria-discuss@lists.launchpad.net Unsubscribe : https://launchpad.net/~maria-discuss More help : https://help.launchpad.net/ListHelp Thanks for the answer,
we are using 'mixed logging' in the binary log so should be safe activating '|log_bin_trust_function_creators = ON'? Do I have to set it on the master only or slave to? Thomas |
we are using 'mixed logging' in the binary log so should be safe activating 'log_bin_trust_function_creators = ON'?
Should be yes.
Do I have to set it on the master only or slave to?
If you don't plan to promote slave to a master at some later/failover time then it's needed only on master. p.s. it's a dynamic setting so if the user needs to make the triggers once you can enable it temporary with SET GLOBAL log_bin_trust_function_creators = 1; then switch off again. rr
Am 24.02.2020 um 14:20 schrieb Reinis Rozitis:
we are using 'mixed logging' in the binary log so should be safe activating 'log_bin_trust_function_creators = ON'? Should be yes. Do I have to set it on the master only or slave to? If you don't plan to promote slave to a master at some later/failover time then it's needed only on master. p.s. it's a dynamic setting so if the user needs to make the triggers once you can enable it temporary with SET GLOBAL log_bin_trust_function_creators = 1; then switch off again. rr _______________________________________________ Mailing list: https://launchpad.net/~maria-discuss Post to : maria-discuss@lists.launchpad.net Unsubscribe : https://launchpad.net/~maria-discuss More help : https://help.launchpad.net/ListHelp Thank you very much for your help. Did activate the
SET GLOBAL log_bin_trust_function_creators = 1; on the master and will let the customer test if creating triggres now works. Greetings, Thomas
participants (2)
-
Reinis Rozitis -
Thomas Plant