Questions tagged with Aurora MySQL

Content language: English

Sort by most recent

Browse through the questions and answers listed below or filter and sort to narrow down your results.

Aurora 3 MySQL / The value of the `partial_revokes` parameter in the parameter group is different from the value of the same variable in MySQL

We are on the way to migration from Aurora 2 (2.10.1 - MySQL 5.7) to Aurora 3 (3.02.0 - MySQL 8.0). We started by testing migration in the dev environment and settled on the "restore from snapshot" option. A custom parameter group was created for the new cluster. Our MySQL instance has a bunch of databases and users. After switching the application's connections to the new Aurora 3 cluster we discovered that several MySQL users are unable to connect to some databases, although there were no such issues with Aurora 2. An investigation showed that the problem is in the way how Aurora 3 (MySQL 8) handles user access to the databases when it is granted using the wildcard character `%`. Our MySQL users are granted the database permissions as follows: ``` GRANT SELECT, INSERT, UPDATE, DELETE ON 'testdb%'.* TO 'testuser'@'%'; ``` This is what the users are able to see in the new cluster: ``` SHOW DATABASES; >>> |Database | +------------------------+ |information_schema | ``` and no one from the `testdb_1 ... testdb_20`. Then we addressed the `partial_revokes` variable and got the following: ``` SHOW GLOBAL variables LIKE '%partial_revokes%'; >>> |Variable_name |Value | +---------------+------+ |partial_revokes|ON | ``` while the same parameter in the parameter group has a hardcoded value `0`: ![Enter image description here](https://repost.aws/media/postImages/original/IMNrCTYHE0QsKqK7WImHdpqA) Even rebooting the instance didn't help MySQL's variable to get the value from the parameter group. So there is no other way for us than granting permissions to each database explicitly for each user. But this does not approach us because of the architectural specifics. --- Finally, the situation with the parameter `partial_revokes` looks like a bug. Can we expect it to be resolved, and will it be allowed to be changed for Aurora users?
2
answers
3
votes
204
views
colden
asked 5 months ago