Skip to content
Snippets Groups Projects
  • Gleb Kashkin's avatar
    bd73a086
    config: revoke privs for default users and roles · bd73a086
    Gleb Kashkin authored
    All user-defined users and roles are not being removed and their
    privileges are not being revoked when this user or role is removed
    from config. This is done to prevent extreme repercussions of
    misconfiguration, e.g. empty config is provided to cluster and it
    breaks up.
    
    Default users and roles are not supposed to be changed, so this rule
    does not apply to them. Now all of non-default privileges will be
    revoked if such user or role is removed from config.
    
    Default users:
    * guest
    * admin
    
    Default roles:
    * super
    * public
    * replication
    
    Part of #8967
    
    NO_DOC=documentation request will be filed manually for the whole
           credentials
    bd73a086
    History
    config: revoke privs for default users and roles
    Gleb Kashkin authored
    All user-defined users and roles are not being removed and their
    privileges are not being revoked when this user or role is removed
    from config. This is done to prevent extreme repercussions of
    misconfiguration, e.g. empty config is provided to cluster and it
    breaks up.
    
    Default users and roles are not supposed to be changed, so this rule
    does not apply to them. Now all of non-default privileges will be
    revoked if such user or role is removed from config.
    
    Default users:
    * guest
    * admin
    
    Default roles:
    * super
    * public
    * replication
    
    Part of #8967
    
    NO_DOC=documentation request will be filed manually for the whole
           credentials