Hi gurus, Here's my problem:
After installing binary version of mysql on sun, I try to add a new user and a new database, namely `dbuser' and `mydb', such that dbuser can access mydb but nothing else. However I found that if I do not grant dbuser 'select' privilege in mysql.user, dbuser cannot connect even if dbuser is granted select privilege for mydb in mysql.db. (1044 error) After granting dbuser 'select' privilege in mysql.user, dbuser can connect to mydb but then dbuser can connect to the database called 'mysql' as well, and thus read mysql.user. Now dbuser knows more than he needs, which is a security concern for me. So is there a way to both be secure and still allow a user to connect? Thanks ----- Ran Pang SE 99 e-mail: [EMAIL PROTECTED] http://www.cas.mcmaster.ca/~pangr tel: (905)529-5619 --------------------------------------------------------------------- Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail <[EMAIL PROTECTED]> To unsubscribe, e-mail <[EMAIL PROTECTED]> Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
