Re: Downgrade privileges on connect

2005-10-13 Thread Joerg Bruehe
Hi Andrew, all! [EMAIL PROTECTED] wrote: [[...]] but I believe in security in depth and so for read-only users I connect to the database with a SQL user that only has the select privilege, and for read/write users I connect to the database with a user with select,insert,update,delete

Downgrade privileges on connect

2005-10-12 Thread Andrew_Hoying
Hello, Is it possible for a MySQL connection to request a downgrade in privileges? What I'd like to be able to do is create one database user account for a database application with read and write privileges to the tables, but if an application user logs in who only has read access, then to

Re: Downgrade privileges on connect

2005-10-12 Thread SGreen
[EMAIL PROTECTED] wrote on 10/12/2005 10:56:43 AM: Hello, Is it possible for a MySQL connection to request a downgrade in privileges? What I'd like to be able to do is create one database user account for a database application with read and write privileges to the tables, but if

Re: Downgrade privileges on connect

2005-10-12 Thread Scott Gifford
[EMAIL PROTECTED] writes: Is it possible for a MySQL connection to request a downgrade in privileges? What I'd like to be able to do is create one database user account for a database application with read and write privileges to the tables, but if an application user logs in who only has

Re: Downgrade privileges on connect

2005-10-12 Thread Andrew_Hoying
] cc mysql@lists.mysql.com Subject Re: Downgrade privileges on connect

Re: Downgrade privileges on connect

2005-10-12 Thread SGreen
mysql@lists.mysql.com Subject Re: Downgrade privileges on connect [EMAIL PROTECTED] wrote on 10/12/2005 10:56:43 AM: Hello, Is it possible for a MySQL connection to request a downgrade in privileges? What I'd

Re: Downgrade privileges on connect

2005-10-12 Thread Andrew_Hoying
[EMAIL PROTECTED] wrote on 10/12/2005 10:46:46 AM: You are correct in that each mysql user account only has one set of permissions. Your application talks to the database and it may only need one login. One login = one set of permissions. When I am designing a web-based application, I

Re: Downgrade privileges on connect

2005-10-12 Thread Scott Gifford
[EMAIL PROTECTED] writes: [...] Your application will still need access to the data it gets from MySQL so changing your MySQL permissions doesn't make any sense, does it. It's your application that needs to say no to the user. You don't want MySQL saying no to your application. Do you?