Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

*: change SHOW CONFIG to require CONFIG privilege #25379

Merged
merged 3 commits into from
Jun 15, 2021

Conversation

morgo
Copy link
Contributor

@morgo morgo commented Jun 11, 2021

What problem does this PR solve?

Problem Summary:

The original design document for SEM specified that SHOW CONFIG would be disabled, but SET CONFIG is still permitted with the config privilege. From further discussion, this is a weird behavior, since SET CONFIG is not useful when SHOW CONFIG is disabled.

Since it is desired that SHOW CONFIG is hidden from lower privileged users, the next discussion topic is what permission should it require? Since SET CONFIG requires the CONFIG privilege, the natural conclusion is that SHOW CONFIG should also.

This PR makes this change to the privileges, and updates the original proposal.

What is changed and how it works?

What's Changed:

The SHOW CONFIG statement now requires the CONFIG privileges to be assigned.

Related changes

  • None

Check List

Tests

  • Unit test
  • Integration test

Side effects

  • Breaking backward compatibility (not expected to be a major use-case broken, but it is still a compatibility change)

Release note

  • The SHOW CONFIG statement now requires the CONFIG privileges to be assigned.

@morgo morgo requested a review from tiancaiamao June 11, 2021 19:50
@morgo morgo requested review from a team as code owners June 11, 2021 19:50
@morgo morgo requested review from lzmhhh123 and removed request for a team June 11, 2021 19:50
@ti-chi-bot ti-chi-bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Jun 11, 2021
@morgo morgo requested a review from bb7133 June 11, 2021 19:50
@morgo
Copy link
Contributor Author

morgo commented Jun 11, 2021

/run-check_dev_2

@morgo morgo added the compatibility-breaker Violation of forwards/backwards compatibility in a design-time piece. label Jun 13, 2021
@bb7133
Copy link
Member

bb7133 commented Jun 15, 2021

/lgtm

@ti-chi-bot
Copy link
Member

@bb7133: Please use GitHub review feature instead of /lgtm [cancel] when you want to submit review to the pull request.
For how to use GitHub review feature, see also this document provided by GitHub.

For the reason we drop support to the commands, see also this page.
This reply is being used as a temporary reply during the migration of review process and will be removed on July 1st.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the ti-community-infra/tichi repository.

@bb7133
Copy link
Member

bb7133 commented Jun 15, 2021

Since it is a compatibility breaker, we need to update the document accordingly.

@bb7133
Copy link
Member

bb7133 commented Jun 15, 2021

PTAL @tiancaiamao @djshow832

@morgo
Copy link
Contributor Author

morgo commented Jun 15, 2021

Since it is a compatibility breaker, we need to update the document accordingly.

Did you mean release notes, or something specific like SHOW CONFIG docs?

@lzmhhh123 lzmhhh123 removed their request for review June 15, 2021 05:48
@bb7133
Copy link
Member

bb7133 commented Jun 15, 2021

Since it is a compatibility breaker, we need to update the document accordingly.

Did you mean release notes, or something specific like SHOW CONFIG docs?

I think we need to do the both, and explicitly announce that this compatibility change in the release note.

@ti-chi-bot ti-chi-bot added the status/LGT1 Indicates that a PR has LGTM 1. label Jun 15, 2021
@ti-chi-bot
Copy link
Member

[REVIEW NOTIFICATION]

This pull request has been approved by:

  • djshow832
  • tiancaiamao

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

@ti-chi-bot ti-chi-bot added status/LGT2 Indicates that a PR has LGTM 2. and removed status/LGT1 Indicates that a PR has LGTM 1. labels Jun 15, 2021
@tiancaiamao
Copy link
Contributor

/merge

@ti-chi-bot
Copy link
Member

This pull request has been accepted and is ready to merge.

Commit hash: 230fe4c

@ti-chi-bot ti-chi-bot added the status/can-merge Indicates a PR has been approved by a committer. label Jun 15, 2021
@zhouqiang-cl
Copy link
Contributor

/rebuild

@bb7133
Copy link
Member

bb7133 commented Jun 15, 2021

/merge

@ti-chi-bot ti-chi-bot merged commit b52a389 into pingcap:master Jun 15, 2021
ti-srebot pushed a commit to ti-srebot/tidb that referenced this pull request Jun 15, 2021
Signed-off-by: ti-srebot <ti-srebot@pingcap.com>
@ti-srebot
Copy link
Contributor

cherry pick to release-5.1 in PR #25433

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
compatibility-breaker Violation of forwards/backwards compatibility in a design-time piece. component/expression needs-cherry-pick-release-5.1 size/S Denotes a PR that changes 10-29 lines, ignoring generated files. status/can-merge Indicates a PR has been approved by a committer. status/LGT2 Indicates that a PR has LGTM 2.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants