"Mike Miller" <[EMAIL PROTECTED]> wrote: > Hi, > > I believe I've done everything from the book and have been fighting with > the same problem for about 6 hours thus far. > > I just upgraded from MySQL 3.23.56 to 4.0.17. In the old system, I > prevented show databases from ordinary users using skip-show-databases. In > order to upgrade I used the same data directory and ran the fix_privs script > as instructed to all all of the required fields to the mysql.* tables as it > did. ALl of this is successful and I can see it all there when I browse > these tables. I did a flush privs, reloaded the whole daemon a few times to > no avail. > All users besides root have been revoked (actually they never had) show > databases permission, yet all users are still able to execute show databses > and receive a list of hundreds of databases. > SHOW VARIABLES keeps telling me that skip show database is OFF, yet I > can't seem to change it with any combo of startup parameters or set commands > due to it being a 'depreciated variable' in all the docs. > I don't see what I'm missing. Is there a trick with the new versions > which I'm not getting? >
Check privileges of those users. If they have such global privileges (on all databases) as SELECT, UPDATE etc. or CREATE TEMPORARY TABLES, LOCK TABLES, they also can see databases in the output of SHOW DATABASES. -- For technical support contracts, goto https://order.mysql.com/?ref=ensita This email is sponsored by Ensita.net http://www.ensita.net/ __ ___ ___ ____ __ / |/ /_ __/ __/ __ \/ / Victoria Reznichenko / /|_/ / // /\ \/ /_/ / /__ [EMAIL PROTECTED] /_/ /_/\_, /___/\___\_\___/ MySQL AB / Ensita.net <___/ www.mysql.com -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]
