Re: GRANT and mysql.user table

2005-07-05 Thread Paul DuBois

At 16:57 -0700 7/4/05, l'[EMAIL PROTECTED] wrote:

I tried as root having GRANT ALL PRIVILEGES with GRANT OPTION
to change the privilege of a user:
GRANT ALL ON mydb.*  TO myUser;

The result of this statement is that the query is OK and 0 rows are affected.
WHen I look at the mysql table holding the grants: user, the myUser 
row is unchanged.


You assigned database-level privileges, which are recorded in mysql.db,
not mysql.user.



What could possibly be preventing the system from changing the GRANT 
of myUser?

Is the mysql.db table part of the granting?


Yes.

Recommended reading:

http://dev.mysql.com/doc/mysql/en/privilege-system.html
http://dev.mysql.com/doc/mysql/en/user-account-management.html

--
Paul DuBois, MySQL Documentation Team
Madison, Wisconsin, USA
MySQL AB, www.mysql.com

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



GRANT and mysql.user table

2005-07-04 Thread l'[EMAIL PROTECTED]

I tried as root having GRANT ALL PRIVILEGES with GRANT OPTION
to change the privilege of a user:
GRANT ALL ON mydb.*  TO myUser;

The result of this statement is that the query is OK and 0 rows are affected.
WHen I look at the mysql table holding the grants: user, the myUser row is 
unchanged.


What could possibly be preventing the system from changing the GRANT of myUser?
Is the mysql.db table part of the granting?

thanks in advance for your help.
laurie 



--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



Re: GRANT and mysql.user table

2005-07-04 Thread Michael Stassen

l'[EMAIL PROTECTED] wrote:

I tried as root having GRANT ALL PRIVILEGES with GRANT OPTION
to change the privilege of a user:
GRANT ALL ON mydb.*  TO myUser;

The result of this statement is that the query is OK and 0 rows are 
affected.
WHen I look at the mysql table holding the grants: user, the myUser row 
is unchanged.


What could possibly be preventing the system from changing the GRANT of 
myUser?

Is the mysql.db table part of the granting?

thanks in advance for your help.
laurie


Most likely, nothing is preventing the granting of privileges.

Users in mysql are [EMAIL PROTECTED]  With GRANT statements, '%' is the 
default host, so if you grant to myuser, as opposed to [EMAIL PROTECTED], you are 
creating/modifying [EMAIL PROTECTED]  http://dev.mysql.com/doc/mysql/en/grant.html


The user table holds global privileges.  You are granting a db-specific 
privilege.  That goes in the 'db' table.  Hence, your statement should not 
have modified the user tablle. 
http://dev.mysql.com/doc/mysql/en/privileges.html


Trying to read and interpret the mysql db tables is definitely not the best 
way to verify user privileges.  Use


  SHOW GRANTS FOR [EMAIL PROTECTED];

instead.  http://dev.mysql.com/doc/mysql/en/show-grants.html

Michael


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]