From: Andrew K. <ak...@co...> - 2004-02-05 01:24:26
|
Your error is in trying to set database permissions through the "user permissions" instead of "database permissions". User permissions is global to all database tables. Database permissions is only database specific. Change permissions in the "user permissions" form to none. Change the "from host permissions" to "any" and choose the operations you want this user to have permission to use. The "from hosts permissions" requires you change host permissions which is another form. Once you change database permissions this user will be allowed to access only the database or databases you choose. Hope this helps. -Andrew Kornak Suspect wrote: >To make things easier, I have added some screenshots with explanations. > >1. http://www.reject.org/pr0ject/webmin/dbcreate.jpg create the db > >2. http://www.reject.org/pr0ject/webmin/usercreate.jpg create the user > >3. http://www.reject.org/pr0ject/webmin/usercreateafter.jpg user created, >but shown here with NO permissions. > >4. http://www.reject.org/pr0ject/webmin/usercreateperms.jpg I added Database >specific permissions for the user testuser on database sample. > >5. http://www.reject.org/pr0ject/webmin/userdbperms.jpg proof that webmin >recorded the new db permissions. > >6. http://www.reject.org/pr0ject/webmin/putty.jpg logging in to mysql >via putty with the user testuser. No databases are present. > >7. http://www.reject.org/pr0ject/webmin/webminuserperms.jpg I select the >user via webmin, and add USER permissions. > >8. http://www.reject.org/pr0ject/webmin/afteruserpermswebmin.jpg Webmin >shows these new user permissions recorded. > >9. http://www.reject.org/pr0ject/webmin/afteruserpermsputty.jpg now the user >can see and read ALL databases within mysql, even though the only db >permissions it's supposed to have are for the sample database. > >The information blocked out is for other users, and there is no >Anonymous option allowed. > >Hope this helps. > > >Today jca...@we... was all like: >** Are you sure you're not seeing the effect of the 'anonymous' user or >** database permissions? These can cause some un-expected privileges to be >** granted, and should be removed as soon as possible.. >** >** I checked the structures of the 'user' and 'db' tables in MySQL 4, and >** they are the same as earlier 4.x versions which Webmin supports OK. >** >** - Jamie >** >** On Tue, 2004-02-03 at 16:08, Suspect wrote: >** > You can grant database permissions, but no user permissions and it fails >** > to read any db as that user. >** > >** > Grant any type of user permissions, and now they can read ALL the dbs. >** > >** > (including the mysql db) >** > >** > Make sense? >** > >** > >** > >** > Today jca...@we... was all like: >** > ** On Thu, 2004-01-29 at 12:10, Suspect wrote: >** > ** > Greetings list, >** > ** > >** > ** > Am I to assume that until further notice, Webmin will NOT be working >** > ** > properly with MySQL 4.0+? >** > ** > >** > ** > I've asked and submitted all sorts of stuff to the list without ever getting >** > ** > feedback at all. >** > ** > >** > ** > I upgraded to 4.0_17 tonite, and was able to confirm a couple of things. >** > ** > >** > ** > 1. They changed the safe_mysqld binary to mysqld_safe >** > ** > 2. The Grant options seem to be the same via CLI as in the past, but Webmin >** > ** > fudges them somehow. >** > ** >** > ** I just installed MySQL 4.0.17 with Webmin 1.130, and it seemed to work >** > ** OK, after changing the module configuration to run mysqld_safe instead >** > ** of safe_mysqld. >** > ** >** > ** What goes wrong with the granting of permissions? Some simple tests >** > ** worked for me .. >** > ** >** > ** - Jamie >** > ** >** > ** >** > ** >** > ** >** > ** ------------------------------------------------------- >** > ** The SF.Net email is sponsored by EclipseCon 2004 >** > ** Premiere Conference on Open Tools Development and Integration >** > ** See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. >** > ** http://www.eclipsecon.org/osdn >** > ** - >** > ** Forwarded by the Webmin mailing list at web...@li... >** > ** To remove yourself from this list, go to >** > ** http://lists.sourceforge.net/lists/listinfo/webadmin-list >** > ** >** >** >** >** ------------------------------------------------------- >** The SF.Net email is sponsored by EclipseCon 2004 >** Premiere Conference on Open Tools Development and Integration >** See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. >** http://www.eclipsecon.org/osdn >** - >** Forwarded by the Webmin mailing list at web...@li... >** To remove yourself from this list, go to >** http://lists.sourceforge.net/lists/listinfo/webadmin-list >** > > > |