Password Expiration Handling with PROXY Privilege in MariaDB: Diagnostic Question
When a MariaDB user account has an expired password and also holds the PROXY privilege, the server must decide whether to enforce the proxy chain before prompting for a password change or to block all operations until the password is reset. This decision affects least‑privilege enforcement, especially in environments where proxy users are used to delegate pe