Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

With binary logging turned on for replication is it better to grant a user SUPER privilege when he/she is defining a stored procedure or UDF or is it better to set log_bin_trust_function_creators = 1 so the SUPER privilege is not required.

I have chosen the 2nd alternative but what is the "standard practice"?

share|improve this question

My preference is to set log_bin_trust_function_creators = 1 to avoid handing out the SUPER priviledge when it's not required for any other functionality. Appropriate permissions help protect against unknown SQL injection (i.e. user attempts to DROP TABLE) or theft of credentials.

Amazon RDS users must also use the second option as RDS does not allow the SUPER priviledge. There is an excellent write up on how to set the log_bin_trust_function_creators property on RDS instances here.

share|improve this answer
Link is dead now, by the way. – Jordan Jun 9 '14 at 15:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.