Mailing List
Home
Forum Home
MySQL General - General MySQL discussion
MySQL++ - Programming with the C++ API to MySQL
MaxDB - Everything about MaxDB, formerly known as SAP DB
ODBC - ODBC with the MySQL Connector/ODBC driver
MySQL on Win32 - Runing MySQL on Windows 9x/Me/NT/2000/XP
Java Help - Mostly related to the MySQL Connector/J driver
Perl - Perl support for MySQL with DBI and DBD::mysql
GUI - MySQL GUI Tools
Announcement
Subjects
• Subject: mysql openssl Question
• ERROR 1045: Access denied for user: 'root@localhost ' (Using
password: NO)
• Update one field with more fields from another table
• Subject: Getting Identity after INSERT
• ERROR 2002: Can 't connect to local MySQL server through socket
• mysql test 4 1 fails with the gis test
• Subject: MySQL Cluster Software
• Downgrade Mysql from 4 to 3 23
• Mysql 4 0 Oracle Stored Procedure Trigger Conversion
• Can 't access mysql after kernel upgrade
• Executing MySQL Commands From Within C Program
• Comparing and writing out BLOBS
• Subject: Re: Preventing Duplicate Entries
• FULLTEXT query format question
• Strange behavior, Table Level Permission
• Does the binary log enabling affect the MySQL performances?
• mysql:it 's a db not a dbms how it 's possible?!
• mysql have same function mthod as Oracle decode()
 
grant diag tool

grant diag tool

2007-07-04       - By Carl Karsten

 Back
I am looking for a tool that would monitor what privileges are being used, and
then a 2nd tool to consolidate them into one GRANT command.

Here is why:

I keep coming across 3rd/4th party docs that say things like:

grant all privileges on *.* to
'django_user'@'localhost' identified by
"swordfish" with grant option;

And that user ends up being both the 'admin' user and the day-to-day dataIO
user, with 0.0 concern for security.   So I send a message to the people that
should know: "what privs are needed for the various steps?"  and have yet to
ever get an answer.

Which makes me want to figure it out for myself, and then I can send a message
"please include this in your docs:..."  but I really don't want to comb though
source code, I would rather just setup a user with "all privileges on *.*" then
run the "setup db scripts" and see what privs were actually used.

Does anything like this exist?

Carl K

--
MySQL GUI Tools Mailing List
For list archives: http://lists.mysql.com/gui-tools
To unsubscribe:    http://lists.mysql.com/gui-tools?unsub=mysql@(protected)