`sync_permissions` Enabled By Default, Any Way to Completely Disable?

Help Security
1

Hey all,

Reading through the docs, it appears once sync_permissions is enabled then it’s a permanent change. The only problem is this variable appears to have been enabled by default when installing a fresh copy of SingleStore 8.1.3 on a secondary production server.

We’re noticing incredibly heavy latency when applying permissions to our 200+ mysql users on this new server, as well as queries in general, compared to our primary server which is 100% identical in database count / partitions / schema, SingleStore version, & server hardware. These are self-managed installs of SingleStore via local hardware. The only difference is our primary server’s original MemSQL version came from 7.x, prior to upgrading.

How can we ensure sync_permissions is disabled? Would we have to delete all nodes, as well as uninstall / re-install SingleStore completely?

Thanks,
Nick

2

Hi, currently, it seems that disabling sync permissions is not possible once the cluster has been created. I will follow up internally to understand why we have enabled sync permissions by default. As the number of users grows, the process of changing or updating role permissions takes more time because the cluster needs to synchronize permissions across all aggregators.

3

Hello Ymonye,
Thank you for reaching out. In your current setup did you upgrade the engine from 7.X to 8.1.3 or did you create a new SingleStore server on 8.1.3?

4

Hey @mkumar, following up on this from months ago. The new system was freshly installed with 8.1.3. I was able to resolve this by deleting all nodes, re-installing with 7.8.22, then upgrading to 8.1.3.