From afd4142c14142a13f7dcaf8bd37ac50dc96f6b04 Mon Sep 17 00:00:00 2001 From: shigeyuki fujishima Date: Tue, 9 Jun 2026 02:44:15 +0900 Subject: [PATCH 1/3] Update privilege management guidelines for setting default roles --- privilege-management.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/privilege-management.md b/privilege-management.md index 8b08960b11c4d..4d07f8f7c757e 100644 --- a/privilege-management.md +++ b/privilege-management.md @@ -478,7 +478,8 @@ Requires `SUPER` privilege. ### KILL -Requires `SUPER` or `CONNECTION_ADMIN` privilege to kill other user sessions. +- When setting default roles for the current user, no extra privilege is required. +- When setting default roles for other users, either the `UPDATE` privilege on mysql.default_roles or the `CREATE USER` privilege is required. ### CREATE RESOURCE GROUP From 1a63ca47142f0d48fd620d8826a8eea6b6472c00 Mon Sep 17 00:00:00 2001 From: shigeyuki fujishima Date: Tue, 9 Jun 2026 02:55:39 +0900 Subject: [PATCH 2/3] Revert "Update privilege management guidelines for setting default roles" This reverts commit afd4142c14142a13f7dcaf8bd37ac50dc96f6b04. --- privilege-management.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/privilege-management.md b/privilege-management.md index 4d07f8f7c757e..8b08960b11c4d 100644 --- a/privilege-management.md +++ b/privilege-management.md @@ -478,8 +478,7 @@ Requires `SUPER` privilege. ### KILL -- When setting default roles for the current user, no extra privilege is required. -- When setting default roles for other users, either the `UPDATE` privilege on mysql.default_roles or the `CREATE USER` privilege is required. +Requires `SUPER` or `CONNECTION_ADMIN` privilege to kill other user sessions. ### CREATE RESOURCE GROUP From 9c09378c70d2d6ef143986aef21f6b2f4c70ff18 Mon Sep 17 00:00:00 2001 From: shigeyuki fujishima Date: Tue, 9 Jun 2026 02:56:56 +0900 Subject: [PATCH 3/3] Update privilege management guidelines for setting default roles --- privilege-management.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/privilege-management.md b/privilege-management.md index 8b08960b11c4d..04e10b9d6b8c3 100644 --- a/privilege-management.md +++ b/privilege-management.md @@ -474,7 +474,8 @@ Requires `SUPER` privilege. ### SET DEFAULT ROLE -Requires `SUPER` privilege. +- When setting default roles for the current user, no extra privilege is required. +- When setting default roles for other users, either the `UPDATE` privilege on `mysql.default_roles` or the `CREATE USER` privilege is required. ### KILL