New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
release-23.1: sql: do not require system table privileges to use SHOW STATISTICS #114479
Conversation
See the docs at: https://www.cockroachlabs.com/docs/stable/show-statistics They say that no special privileges are needed. Release note (bug fix): The SHOW STATISTICS command previously incorrectly required the user to have the admin role. It was intended to only require the user to have any privilege on the table being inspected. This is now fixed.
Thanks for opening a backport. Please check the backport criteria before merging:
If your backport adds new functionality, please ensure that the following additional criteria are satisfied:
Also, please add a brief release justification to the body of your PR to justify this |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 3 of 3 files at r1, all commit messages.
Reviewable status: complete! 1 of 0 LGTMs obtained (waiting on @rharding6373 and @Xiang-Gu)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for fixing this!
@@ -348,16 +348,17 @@ CREATE TABLE users(id UUID DEFAULT gen_random_uuid() PRIMARY KEY, promo_id INT R | |||
defer r.Exec(t, "SET ROLE root") | |||
r.Exec(t, "CREATE TABLE permissions (k PRIMARY KEY) AS SELECT 1") | |||
rows := r.QueryStr(t, "EXPLAIN ANALYZE (DEBUG) SELECT * FROM permissions") | |||
// Check that we see two errors about missing privileges as warnings | |||
// (one for the cluster settings and another for the table statistics). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's a bummer that we wrote this without understanding the implications.
Backport 1/1 commits from #114166.
/cc @cockroachdb/release
Release justification: serious bug fix
See the docs at: https://www.cockroachlabs.com/docs/stable/show-statistics
They say that no special privileges are needed.
Epic: None
Release note (bug fix): The SHOW STATISTICS command previously incorrectly
required the user to have the admin role. It was intended to only
require the user to have any privilege on the table being inspected.
This is now fixed.