###############################################################################
#
# The user must have GROUP_REPLICATION_ADMIN privileges to modify the
# group_replication_consistency option on GLOBAL scope
#
# Test:
#   0. One server is enough for this test
#   1. Create user with SYSTEM_VARIABLES_ADMIN privilege to allow change
#      globals variables
#   2. Connect to server using group_rpl_user
#   3. Set group_replication_consistency at a global scope shall fail due
#      to lack of privileges
#   4. Set group_replication_consistency at a session scope shall succeed,
#      do not need extra privileges
#   5. Grant GROUP_REPLICATION_ADMIN privileges to group_rpl_user
#   6. Set group_replication_consistency at a global scope shall succeed
#   7. Cleanup
#
###############################################################################

--source include/have_group_replication_plugin.inc
--let $rpl_skip_group_replication_start= 1
--source include/group_replication.inc
--source include/start_and_bootstrap_group_replication.inc

--echo
--echo # 1. Create user with SYSTEM_VARIABLES_ADMIN privilege to allow change
--echo #    globals variables

CREATE USER 'group_rpl_user' IDENTIFIED BY '';
GRANT SYSTEM_VARIABLES_ADMIN ON *.* TO 'group_rpl_user';

--connect (con_group_rpl_user,127.0.0.1,group_rpl_user,,test,$MASTER_MYPORT,,)

--echo
--echo # 2. Connect to server using group_rpl_user

--let $rpl_connection_name= con_group_rpl_user
--source include/rpl_connection.inc

--echo
--echo # 3. Set group_replication_consistency at a global scope shall fail due
--echo #    to lack of privileges

--error ER_SPECIFIC_ACCESS_DENIED_ERROR
SET @@GLOBAL.group_replication_consistency= BEFORE_ON_PRIMARY_FAILOVER;

--echo
--echo # 4. Set group_replication_consistency at a session scope shall succeed,
--echo #    do not need extra privileges

SET @@SESSION.group_replication_consistency= BEFORE_ON_PRIMARY_FAILOVER;

--echo
--echo # 5. Grant GROUP_REPLICATION_ADMIN privileges to group_rpl_user

--let $rpl_connection_name= default
--source include/rpl_connection.inc

GRANT GROUP_REPLICATION_ADMIN ON *.* TO 'group_rpl_user';

--echo
--echo # 6. Set group_replication_consistency at a global scope shall succeed

--let $rpl_connection_name= con_group_rpl_user
--source include/rpl_connection.inc

SET @@GLOBAL.group_replication_consistency= BEFORE_ON_PRIMARY_FAILOVER;

--echo
--echo # 7. Cleanup

--let $rpl_connection_name= default
--source include/rpl_connection.inc

SET @@GLOBAL.group_replication_consistency= DEFAULT;

--disconnect con_group_rpl_user
DROP USER group_rpl_user;

--source include/group_replication_end.inc