We stumbled upon the following 'feature' of MySQL:
If, for example user 'x' has a database called 'user_data' he is able to create a table called user2data and so on without create privileges. It looks like the underscore is used as some kind of wildcard, now is the question: is this correct or is this something that should not be? Kind regards, Jeroen Bosch
