Re: Downgrade privileges on connect

2005-10-13 Thread Joerg Bruehe
Hi Andrew, all! [EMAIL PROTECTED] wrote: [[...]] but I believe in security in depth and so for read-only users I connect to the database with a SQL user that only has the select privilege, and for read/write users I connect to the database with a user with select,insert,update,delete privileg

Re: Downgrade privileges on connect

2005-10-12 Thread Scott Gifford
[EMAIL PROTECTED] writes: [...] > Your application will still need access to the data it gets from > MySQL so changing your MySQL permissions doesn't make any sense, > does it. It's your application that needs to say "no" to the > user. You don't want MySQL saying "no" to your application. Do you

Re: Downgrade privileges on connect

2005-10-12 Thread Andrew_Hoying
[EMAIL PROTECTED] wrote on 10/12/2005 10:46:46 AM: > > You are correct in that each mysql user account only has one set of > permissions. Your application talks to the database and it may only > need one login. One login = one set of permissions. When I am > designing a web-based application

Re: Downgrade privileges on connect

2005-10-12 Thread SGreen
> > 10/12/2005 09:20 To > AM[EMAIL PROTECTED] > cc > mysql@lists.mysql.com > Subject >Re: Downgrade privileges on connect > > >

Re: Downgrade privileges on connect

2005-10-12 Thread Andrew_Hoying
] cc mysql@lists.mysql.com Subject Re: Downgrade privileges on connect

Re: Downgrade privileges on connect

2005-10-12 Thread Scott Gifford
[EMAIL PROTECTED] writes: > Is it possible for a MySQL connection to request a downgrade in > privileges? What I'd like to be able to do is create one database > user account for a database application with read and write > privileges to the tables, but if an application user logs in who > only h

Re: Downgrade privileges on connect

2005-10-12 Thread SGreen
[EMAIL PROTECTED] wrote on 10/12/2005 10:56:43 AM: > > > > > Hello, > > Is it possible for a MySQL connection to request a downgrade in privileges? > What I'd like to be able to do is create one database user account for a > database application with read and write privileges to the tables,

Downgrade privileges on connect

2005-10-12 Thread Andrew_Hoying
Hello, Is it possible for a MySQL connection to request a downgrade in privileges? What I'd like to be able to do is create one database user account for a database application with read and write privileges to the tables, but if an application user logs in who only has read access, then to do