Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

With binary logging turned on for replication is it better to grant a user SUPER privilege when he/she is defining a stored procedure or UDF or is it better to set log_bin_trust_function_creators = 1 so the SUPER privilege is not required.

I have chosen the 2nd alternative but what is the "standard practice"?

share|improve this question
add comment

1 Answer

My preference is to set log_bin_trust_function_creators = 1 to avoid handing out the SUPER priviledge when it's not required for any other functionality. Appropriate permissions help protect against unknown SQL injection (i.e. user attempts to DROP TABLE) or theft of credentials.

Amazon RDS users must also use the second option as RDS does not allow the SUPER priviledge. There is an excellent write up on how to set the log_bin_trust_function_creators property on RDS instances here.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.