I give file access to a user on tables in a database : 

GRANT INSERT,SELECT,FILE ON LOGS.* TO www@localhost identified by
'hidden';

then : 

SHOW GRANTS www@localhost;
+-----------------------------------------------------------------------------------+
| Grants for www@localhost                                             
            |
+-----------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'www'@'localhost' IDENTIFIED BY PASSWORD
'687a38d32961f6bd' |
| GRANT SELECT, INSERT, DROP ON logs.* TO 'www'@'localhost'            
            |
+-----------------------------------------------------------------------------------+

Why is it listed as "DROP" ? 
User is able to do a LOAD DATA LOCAL INFILE ... 

!!! Also, user is able to DROP tables in that database.

MySQL 3.23.32.



=====
ing. Andrei Boros
Centrul pt. Tehnologia Informatiei
Societatea Romana de Radiodifuziune

__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/

---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to