1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
###############################################################################
#
# The user must have GROUP_REPLICATION_ADMIN privileges to modify the
# group_replication_consistency option on GLOBAL scope
#
# Test:
# 0. One server is enough for this test
# 1. Create user with SYSTEM_VARIABLES_ADMIN privilege to allow change
# globals variables
# 2. Connect to server using group_rpl_user
# 3. Set group_replication_consistency at a global scope shall fail due
# to lack of privileges
# 4. Set group_replication_consistency at a session scope shall succeed,
# do not need extra privileges
# 5. Grant GROUP_REPLICATION_ADMIN privileges to group_rpl_user
# 6. Set group_replication_consistency at a global scope shall succeed
# 7. Cleanup
#
###############################################################################
--source include/not_have_privilege_checks_user.inc
--source include/have_group_replication_plugin.inc
--let $rpl_skip_group_replication_start= 1
--source include/group_replication.inc
--source include/start_and_bootstrap_group_replication.inc
--echo
--echo # 1. Create user with SYSTEM_VARIABLES_ADMIN privilege to allow change
--echo # globals variables
CREATE USER 'group_rpl_user' IDENTIFIED BY '';
GRANT SYSTEM_VARIABLES_ADMIN ON *.* TO 'group_rpl_user';
--connect (con_group_rpl_user,127.0.0.1,group_rpl_user,,test,$MASTER_MYPORT,,)
--echo
--echo # 2. Connect to server using group_rpl_user
--let $rpl_connection_name= con_group_rpl_user
--source include/rpl_connection.inc
--echo
--echo # 3. Set group_replication_consistency at a global scope shall fail due
--echo # to lack of privileges
--error ER_SPECIFIC_ACCESS_DENIED_ERROR
SET @@GLOBAL.group_replication_consistency= BEFORE_ON_PRIMARY_FAILOVER;
--echo
--echo # 4. Set group_replication_consistency at a session scope shall succeed,
--echo # do not need extra privileges
SET @@SESSION.group_replication_consistency= BEFORE_ON_PRIMARY_FAILOVER;
--echo
--echo # 5. Grant GROUP_REPLICATION_ADMIN privileges to group_rpl_user
--let $rpl_connection_name= default
--source include/rpl_connection.inc
GRANT GROUP_REPLICATION_ADMIN ON *.* TO 'group_rpl_user';
--echo
--echo # 6. Set group_replication_consistency at a global scope shall succeed
--let $rpl_connection_name= con_group_rpl_user
--source include/rpl_connection.inc
SET @@GLOBAL.group_replication_consistency= BEFORE_ON_PRIMARY_FAILOVER;
--echo
--echo # 7. Cleanup
--let $rpl_connection_name= default
--source include/rpl_connection.inc
SET @@GLOBAL.group_replication_consistency= DEFAULT;
--disconnect con_group_rpl_user
DROP USER group_rpl_user;
--source include/group_replication_end.inc
|
