#135 MySQL Grant Priveldges

open
nobody
None
5
2001-08-07
2001-08-07
Anonymous
No

It appears the MySQL module doesnt grant database and
user permissions correctly. Ive created a test user
with absolutely no priveledges no create, modify, or
anything. But this user can still drop databases,
create new ones, and view the content from others.
Anyone know what might cause this, or a possible fix?

Discussion

  • Logged In: NO

    I don't know of a fix, but I deleted the initial accounts
    that come setup in webmin and now I can't access anything,
    and haven't been able to find any relevant info regarding
    anyone else having this problem.

     
  • Logged In: NO

    If you create a user with no USER permissions for mysql in
    webmin, but with database specific permissions, you get an
    error in usermin that no db's are accessible via this user.

    However, if I add any USER permissions, the user can see ALL
    databases in usermin. This is a security hole as far as I'm
    concerned. (Unless mysql fudged the permissions with 4.0)