dolt
dolt copied to clipboard
Cluster replication allows a standby server to run `CREATE DATABASE ...` successfully.
The expected behavior of a server in standby role within cluster replication is that it is read-only. However, currently the standby role server allows:
-
CREATE DATABASE ...
-
DROP DATABASE ...
-
CREATE|ALTER|DROP USER|GRANT ...
The later two are necessary for user functionality until we fix #4566 and #4567, but allowing CREATE DATABASE ...
is not necessary because we do correctly replicate CREATE DATABASE ...
run on a primary.
Eventually we should forbid all three of these interactions, but to start with we should at least forbid CREATE DATABASE ...
.