GoldenGate and Required MySQL Privileges

Question

Hi,
Environment Details:
MySQL Version 5.1.56-log
GoldenGate Version 11.2.1.0.1
Issue:
We are replicating data from a MySQL instance containing two databases, db1 and db2. However, we are only replicating tables from db1. GoldenGate logs into the database using the user ggc which has the following MySQL grants:
GRANT USAGE ON *.* TO 'ggc'@'localhost'
GRANT SELECT ON `db1`.* TO 'ggc'@'localhost'
The extract parameter file is as follows:
EXTRACT E_LD_C
SETENV (NLS_LANG = "AMERICAN_AMERICA.AL32UTF8")
SOURCEDB ggc, USERID ggc
EXTTRAIL ./dirdat/E_LD_oc/oc
TRANLOGOPTIONS ALTLOGDEST /mysql/mysqllog/mysqlbin.index
TABLE db1.*;
After starting the extract it abends with the following message:
2013-03-19 17:58:34 ERROR OGG-00146 VAM function VAMRead returned unexpected result: error 600 - VAM Client Report <CAUSE OF FAILURE : Failed to Query Metadata for Table : db1.test_tab AND Failed Queries Are: QUERY_FAILED_CHARSET_RETRIEVAL,QUERY_FAILED_SIGNED_INFO_RETRIEVAL,
Looking at the MySQL query log one of these queries is:
select character_set_name from information_schema.columns where table_schema='db2' and table_name='other_tab' and ordinal_position=7
I suspect that GoldenGate is querying for metadata for tables it is not even replicating i.e., tables from db2, when encountering them in the binary log. Granting the following privilege resolves the issue:
GRANT SELECT ON *.* TO 'ggc'@'localhost';
However, for security reasons we only want to grant user ggc privileges to db1 not all the tables within the instance.
Any help with the following issue would gratefully received.
Thanks, Paul

Answer 1

My understaning is that you can't grant access to the INFORMATION_SCHEMA directly. If you grant access to a user for a table then that user can query the entries for that table in the INFORMATION_SCHEMA database. Therefore if GoldenGate is trying to access data in the INFORMATION_SCHEMA database for a table that it has no access to then it will retrieve no rows. This means that if GoldenGate is querying the INFORMATION_SCHEMA database for every table that writes to the binary log it will fallover when it encounters a table it does not have SELECT access to which to me means it must be given the privilege SELECT ANY TABLE to work.
Thanks, Paul