Re: external mysqldump
hmm, i cannot do anything what let users see others data. if there is no possibility then external dumps/inserts of routines using mysqldump/mysql cannot be offered. so routines must separate installed using phpmyadmin over local connect... not satisfying... Thanks for help Andre - Original Message - From: Simon Elliston Ball [EMAIL PROTECTED] To: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 1:13 PM Subject: Re: external mysqldump Ah! What you actually need is for the users to have SELECT access to mysql.procs. GRANT SELECT ON mysql.procs TO user@'%' identified by Of course this is something of a security risk as well, in that any use could see any other user's functions and stored procedures, but it will achieve the permissions you need without giving away all the data as well. Simon Simon Elliston Ball [EMAIL PROTECTED] On 20 Feb 2008, at 12:03, Andre Hübner wrote: i tried, but always got error: ERROR 1221 (HY000): Incorrect usage of DB GRANT and GLOBAL PRIVILEGES i followed this and did found a former discussion. seems to be not possible to give this privileg by this line. http://lists.mysql.com/mysql/198421 hmm, bad case, isnt it? Andre - Original Message - From: Simon Elliston Ball [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Sent: Wednesday, February 20, 2008 12:08 PM Subject: Re: external mysqldump GRANT SUPER ON userdatabase.* to user@'%' identified by 'password'; That way each external user can only do super things to their own db. simon Simon Elliston Ball [EMAIL PROTECTED] On 20 Feb 2008, at 11:03, Andre Hübner wrote: Unfortunately, not. For internal uses i can use root or other special user. But if my users want to do backup on there own with external mysqldump they get this error. if i do login with userdata from console i can do mysqldump, its only the external connect which makes this problem. - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 10:26 AM Subject: Re: external mysqldump I use a specific user (backup) for my backups, therefore user privileges are not effected. Is there something like this which you could use? Andre Hübner wrote: Thank you for answering. is there a way to do without granting super-privileg? for security reasons i cannot grant too high privileges for normal db- users. rights should be limited to own db. Thanks Andre - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 9:46 AM Subject: Re: external mysqldump Try: mysql -u root -p mysql GRANT SUPER ON *.* TO myuser@'%'; mysql GRANT SUPER ON *.* TO myuser@'localhost'; Andre Hübner wrote: Hi List, i wrote this alrready in mysql-forum a few days ago, but did not get any answer. :( i try to do backup with mysqldump from external host with routines. mysqldump -R -h my.host.name -u myuser -p'mypass' mydb filename.sql I got error: myuser has insufficent privileges to SHOW CREATE FUNCTION `countuser`! It works if i do the same mysqldumLine directly on the server where db is installed. In mysql-table myuser has same privileges for % and locklhost. Are there some further restrictions for external connects? I dont have an idea what to change now. Thank you Andre -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: external mysqldump
Try: mysql -u root -p mysql GRANT SUPER ON *.* TO myuser@'%'; mysql GRANT SUPER ON *.* TO myuser@'localhost'; Andre Hübner wrote: Hi List, i wrote this alrready in mysql-forum a few days ago, but did not get any answer. :( i try to do backup with mysqldump from external host with routines. mysqldump -R -h my.host.name -u myuser -p'mypass' mydb filename.sql I got error: myuser has insufficent privileges to SHOW CREATE FUNCTION `countuser`! It works if i do the same mysqldumLine directly on the server where db is installed. In mysql-table myuser has same privileges for % and locklhost. Are there some further restrictions for external connects? I dont have an idea what to change now. Thank you Andre -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: external mysqldump
Thank you for answering. is there a way to do without granting super-privileg? for security reasons i cannot grant too high privileges for normal db-users. rights should be limited to own db. Thanks Andre - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 9:46 AM Subject: Re: external mysqldump Try: mysql -u root -p mysql GRANT SUPER ON *.* TO myuser@'%'; mysql GRANT SUPER ON *.* TO myuser@'localhost'; Andre Hübner wrote: Hi List, i wrote this alrready in mysql-forum a few days ago, but did not get any answer. :( i try to do backup with mysqldump from external host with routines. mysqldump -R -h my.host.name -u myuser -p'mypass' mydb filename.sql I got error: myuser has insufficent privileges to SHOW CREATE FUNCTION `countuser`! It works if i do the same mysqldumLine directly on the server where db is installed. In mysql-table myuser has same privileges for % and locklhost. Are there some further restrictions for external connects? I dont have an idea what to change now. Thank you Andre -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: external mysqldump
I use a specific user (backup) for my backups, therefore user privileges are not effected. Is there something like this which you could use? Andre Hübner wrote: Thank you for answering. is there a way to do without granting super-privileg? for security reasons i cannot grant too high privileges for normal db-users. rights should be limited to own db. Thanks Andre - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 9:46 AM Subject: Re: external mysqldump Try: mysql -u root -p mysql GRANT SUPER ON *.* TO myuser@'%'; mysql GRANT SUPER ON *.* TO myuser@'localhost'; Andre Hübner wrote: Hi List, i wrote this alrready in mysql-forum a few days ago, but did not get any answer. :( i try to do backup with mysqldump from external host with routines. mysqldump -R -h my.host.name -u myuser -p'mypass' mydb filename.sql I got error: myuser has insufficent privileges to SHOW CREATE FUNCTION `countuser`! It works if i do the same mysqldumLine directly on the server where db is installed. In mysql-table myuser has same privileges for % and locklhost. Are there some further restrictions for external connects? I dont have an idea what to change now. Thank you Andre -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: external mysqldump
Unfortunately, not. For internal uses i can use root or other special user. But if my users want to do backup on there own with external mysqldump they get this error. if i do login with userdata from console i can do mysqldump, its only the external connect which makes this problem. - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 10:26 AM Subject: Re: external mysqldump I use a specific user (backup) for my backups, therefore user privileges are not effected. Is there something like this which you could use? Andre Hübner wrote: Thank you for answering. is there a way to do without granting super-privileg? for security reasons i cannot grant too high privileges for normal db-users. rights should be limited to own db. Thanks Andre - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 9:46 AM Subject: Re: external mysqldump Try: mysql -u root -p mysql GRANT SUPER ON *.* TO myuser@'%'; mysql GRANT SUPER ON *.* TO myuser@'localhost'; Andre Hübner wrote: Hi List, i wrote this alrready in mysql-forum a few days ago, but did not get any answer. :( i try to do backup with mysqldump from external host with routines. mysqldump -R -h my.host.name -u myuser -p'mypass' mydb filename.sql I got error: myuser has insufficent privileges to SHOW CREATE FUNCTION `countuser`! It works if i do the same mysqldumLine directly on the server where db is installed. In mysql-table myuser has same privileges for % and locklhost. Are there some further restrictions for external connects? I dont have an idea what to change now. Thank you Andre -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: external mysqldump
Ah! What you actually need is for the users to have SELECT access to mysql.procs. GRANT SELECT ON mysql.procs TO user@'%' identified by Of course this is something of a security risk as well, in that any use could see any other user's functions and stored procedures, but it will achieve the permissions you need without giving away all the data as well. Simon Simon Elliston Ball [EMAIL PROTECTED] On 20 Feb 2008, at 12:03, Andre Hübner wrote: i tried, but always got error: ERROR 1221 (HY000): Incorrect usage of DB GRANT and GLOBAL PRIVILEGES i followed this and did found a former discussion. seems to be not possible to give this privileg by this line. http://lists.mysql.com/mysql/198421 hmm, bad case, isnt it? Andre - Original Message - From: Simon Elliston Ball [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Sent: Wednesday, February 20, 2008 12:08 PM Subject: Re: external mysqldump GRANT SUPER ON userdatabase.* to user@'%' identified by 'password'; That way each external user can only do super things to their own db. simon Simon Elliston Ball [EMAIL PROTECTED] On 20 Feb 2008, at 11:03, Andre Hübner wrote: Unfortunately, not. For internal uses i can use root or other special user. But if my users want to do backup on there own with external mysqldump they get this error. if i do login with userdata from console i can do mysqldump, its only the external connect which makes this problem. - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 10:26 AM Subject: Re: external mysqldump I use a specific user (backup) for my backups, therefore user privileges are not effected. Is there something like this which you could use? Andre Hübner wrote: Thank you for answering. is there a way to do without granting super-privileg? for security reasons i cannot grant too high privileges for normal db- users. rights should be limited to own db. Thanks Andre - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 9:46 AM Subject: Re: external mysqldump Try: mysql -u root -p mysql GRANT SUPER ON *.* TO myuser@'%'; mysql GRANT SUPER ON *.* TO myuser@'localhost'; Andre Hübner wrote: Hi List, i wrote this alrready in mysql-forum a few days ago, but did not get any answer. :( i try to do backup with mysqldump from external host with routines. mysqldump -R -h my.host.name -u myuser -p'mypass' mydb filename.sql I got error: myuser has insufficent privileges to SHOW CREATE FUNCTION `countuser`! It works if i do the same mysqldumLine directly on the server where db is installed. In mysql-table myuser has same privileges for % and locklhost. Are there some further restrictions for external connects? I dont have an idea what to change now. Thank you Andre -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: external mysqldump
i tried, but always got error: ERROR 1221 (HY000): Incorrect usage of DB GRANT and GLOBAL PRIVILEGES i followed this and did found a former discussion. seems to be not possible to give this privileg by this line. http://lists.mysql.com/mysql/198421 hmm, bad case, isnt it? Andre - Original Message - From: Simon Elliston Ball [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Sent: Wednesday, February 20, 2008 12:08 PM Subject: Re: external mysqldump GRANT SUPER ON userdatabase.* to user@'%' identified by 'password'; That way each external user can only do super things to their own db. simon Simon Elliston Ball [EMAIL PROTECTED] On 20 Feb 2008, at 11:03, Andre Hübner wrote: Unfortunately, not. For internal uses i can use root or other special user. But if my users want to do backup on there own with external mysqldump they get this error. if i do login with userdata from console i can do mysqldump, its only the external connect which makes this problem. - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 10:26 AM Subject: Re: external mysqldump I use a specific user (backup) for my backups, therefore user privileges are not effected. Is there something like this which you could use? Andre Hübner wrote: Thank you for answering. is there a way to do without granting super-privileg? for security reasons i cannot grant too high privileges for normal db- users. rights should be limited to own db. Thanks Andre - Original Message - From: Ben Clewett [EMAIL PROTECTED] To: Andre Hübner [EMAIL PROTECTED] Cc: mysql@lists.mysql.com Sent: Wednesday, February 20, 2008 9:46 AM Subject: Re: external mysqldump Try: mysql -u root -p mysql GRANT SUPER ON *.* TO myuser@'%'; mysql GRANT SUPER ON *.* TO myuser@'localhost'; Andre Hübner wrote: Hi List, i wrote this alrready in mysql-forum a few days ago, but did not get any answer. :( i try to do backup with mysqldump from external host with routines. mysqldump -R -h my.host.name -u myuser -p'mypass' mydb filename.sql I got error: myuser has insufficent privileges to SHOW CREATE FUNCTION `countuser`! It works if i do the same mysqldumLine directly on the server where db is installed. In mysql-table myuser has same privileges for % and locklhost. Are there some further restrictions for external connects? I dont have an idea what to change now. Thank you Andre -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
