Hi there,

I tested your setup and wors fine for me. I issued this commands as mysql's
root:

grant usage on *.* to [EMAIL PROTECTED] identified by 'nelu';
grant select,insert,update,create,drop on test.* to nelu@'%';

Then I logged in as nelu with:

mysql -u nelu -p test

create table test1 (id int, nume text);
insert into test1 values (1,"cico");
select * from test1;
+------+------+
| id   | nume |
+------+------+
|    1 | cico |
+------+------+
drop table test1;

So it's clearly working.

Therefore I recommend you to do a
select * from mysql.user;
to see if you have other "rules" that cancel the good ones somehow.

In addition, this is from manual and maybe useful for future security:
"You cannot specify that a user has privileges to create or drop tables in a
database but not to create or drop the database itself."

HTH,

Lian Sebe, M.Sc.
Freelance Analyst-Programmer
www.programEz.net

> -----Original Message-----
> From: Jeff McKeon [mailto:[EMAIL PROTECTED]
> Sent: Monday, July 28, 2003 10:43 PM
> To: [EMAIL PROTECTED]
> Subject: FW: rights to create table, select, then drop table..
>
>
> Nobody has any ideas on this one?
>
> Jeff
>
> -----Original Message-----
> From: Jeff McKeon
> Sent: Friday, July 25, 2003 3:23 PM
> To: [EMAIL PROTECTED]
> Subject: rights to create table, select, then drop table..
>
>
> I have a need to get data from the db that requires me to
>
> 1) do a select and create a new table with the results
> 2) run a query against that new table
> 3) drop the new table
>
> I have a script on my server that does this using the root account that
> has all on *.* for the db. It works fine.
>
> I now want to get these results on a web page.
> I want to create a new db user for my .php web page to use to connect to
> the db that only has the needed priviledges on that specific db to get
> the job done.
>
> what priviledges do I need to give that user?
>
> currently I have the following but the user can't even log into the db
> from the command line..
>
> mysql> show grants for user;
> +-----------------------------------------------------------------------
> ---------+
> | Grants for [EMAIL PROTECTED] |
> +-----------------------------------------------------------------------
> ---------+
> | GRANT USAGE ON *.* TO 'user'@'%' IDENTIFIED BY PASSWORD
> '6fe4c0ab2cf30ae3' |
> | GRANT SELECT, INSERT, UPDATE, CREATE, DROP ON `db1`.* TO 'user'@'%' |
> +-----------------------------------------------------------------------
> ---------+
> 2 rows in set (0.00 sec)
>
> when I do a "show grants for user", what should I see to allow what I
> want?
>
> Thanks,
>
> Jeff McKeon
>
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe:
> http://lists.mysql.com/[EMAIL PROTECTED]
>
>
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]
>
>


-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to