Bug #78346 mysqlrpladmin permissions documentation is incomplete
Submitted: 5 Sep 2015 22:43 Modified: 16 Sep 2016 7:24
Reporter: monty solomon Email Updates:
Status: Verified Impact on me:
None 
Category:MySQL Utilities Severity:S2 (Serious)
Version:1.5.4, 1.6.4 OS:Any
Assigned to: CPU Architecture:Any

[5 Sep 2015 22:43] monty solomon
Description:
The permissions section does not mention that UPDATE privileges are sometimes required for the mysql.user table for the switchover operation.

How to repeat:
Create a user with all of the permissions specified in the documentation.

GRANT CREATE, DROP, INSERT, RELOAD, REPLICATION CLIENT, REPLICATION SLAVE, SELECT, SUPER ON *.* TO 'SUSR_rpladmin'@'%' IDENTIFIED BY PASSWORD '*redacted' WITH GRANT OPTION;

Execute switchover operation

mysqlrpladmin --verbose --demote-master --discover-slaves-login=.myrpladmin.cnf/[SUSR_rpladmin]  --new-master=.myrpladmin.cnf/[lively-haze] --master=.myrpladmin.cnf[noisy-pond] --rpl-user=SUSR_Repl --log=mysqlrpladmin.log switchover

See error message

# Checking slaves configuration to master.
# When the master_info_repository variable is set to FILE, the --rpl-user option may be used only if the user specified matches what is shown in the SLAVE STATUS output unless the --force option is used.
ERROR: Query failed. 1142 (42000): UPDATE command denied to user 'SUSR_rpladmin' for table 'user'

Suggested fix:
Update the permissions documentation for mysqlrpladmin.

Explain fully in the documentation why each GRANT is needed and how it is used for each utility.
[16 Sep 2016 7:24] Chiranjeevi Battula
Hello monty solomon,

Thank you for the bug report.

Thanks,
Chiranjeevi.