Note
- This variable is available starting with V4.3.2 in V4.3.x.
- This variable is available starting with V4.2.3 in V4.2.x.
Description
ob_security_version specifies the OceanBase Database version compatible with the security features.
Privilege requirements
Query variables
The
systenant and all user tenants can execute theSHOW VARIABLESstatement or query theSYS.TENANT_VIRTUAL_GLOBAL_VARIABLE(Oracle mode) orinformation_schema.GLOBAL_VARIABLES(MySQL mode) view to obtain the value of a global system variable.Modify variables
The
systenant can directly modify the value of a global system variable.A MySQL user tenant must have the
SUPERorALTER SYSTEMprivilege to modify the value of a global system variable.An Oracle user tenant must have the
ALTER SYSTEMprivilege to modify the value of a global system variable.
Attributes
| Attribute | Description |
|---|---|
| Type | Varchar |
| Default value | 4.2.1.0 |
| Value range | 4.2.3.0 and later OceanBase Database versions |
| Scope | Global |
| Modifiable | Yes. You can execute the SET or ALTER SESSION SET statement to modify the value. |
Usage notes
If you do not explicitly specify the value of this variable when you create a tenant, the value is set to the current
cluster_version.For users who require high security, after you upgrade the database to a new version, you must ensure that the business does not use any security vulnerabilities and that the business account has the required privileges before you set this variable to a higher version.
This variable is used only to control changes to new security features.
Unlike the
ob_compatibility_versionvariable, this variable can only be set to a higher version and cannot be rolled back.
Examples
Specify the OceanBase Database version compatible with the security features as V4.2.3.0 when you create a tenant.
obclient> create tenant tenant_m57 zone_list=('z1'),primary_zone='z1',resource_pool_list=('pool1') set ob_compatibility_mode='MYSQL',ob_security_version='4.2.3.0',ob_tcp_invited_nodes='%';
set global ob_security_version ='4.3.1.0';