Skip to content

Fix #17454 - Prevent a regular user to execute unauthorized commands "SHOW MASTER/SLAVE STATUS"#20221

Open
gs71 wants to merge 1 commit intophpmyadmin:QA_5_2from
gs71:patch-2
Open

Fix #17454 - Prevent a regular user to execute unauthorized commands "SHOW MASTER/SLAVE STATUS"#20221
gs71 wants to merge 1 commit intophpmyadmin:QA_5_2from
gs71:patch-2

Conversation

@gs71
Copy link
Copy Markdown
Contributor

@gs71 gs71 commented Mar 7, 2026

Description

Prevent a regular user to execute "SHOW MASTER/SLAVE STATUS", generating useless errors in the SQL error log (if enabled)

Fixes #17454

Before submitting pull request, please review the following checklist:

  • Make sure you have read our CONTRIBUTING.md document.
  • Make sure you are making a pull request against the correct branch. For example, for bug fixes in a released version use the corresponding QA branch and for new features use the master branch. If you have a doubt, you can ask as a comment in the bug report or on the mailing list.
  • Every commit has proper Signed-off-by line as described in our DCO. This ensures that the work you're submitting is your own creation.
  • Every commit has a descriptive commit message.
  • Every commit is needed on its own, if you have just minor fixes to previous commits, you can squash them.
  • Any new functionality is covered by tests.

Signed-off-by: Guido Selva guido.selva@gmail.com

@gs71 gs71 changed the title Prevent a regular user to execute unauthorized commands "SHOW MASTER/SLAVE STATUS" Fix #17454 - Prevent a regular user to execute unauthorized commands "SHOW MASTER/SLAVE STATUS" Mar 7, 2026
@williamdes
Copy link
Copy Markdown
Member

Same than for #20222
I think there is some new permission check to add and not re use this one that only checks access to the mysql.user table

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants