11 Jul
2014
11 Jul
'14
10:15 p.m.
On 7/11/14, 4:10 PM, Chirayu Chiripal wrote:
On Fri, Jul 11, 2014 at 7:15 PM, Isaac Bennetch <bennetch@gmail.com mailto:bennetch@gmail.com> wrote:
On Fri, Jul 11, 2014 at 9:24 AM, Chirayu Chiripal <chirayu.chiripal@gmail.com <mailto:chirayu.chiripal@gmail.com>> wrote: > On Fri, Jul 11, 2014 at 6:46 PM, Isaac Bennetch <bennetch@gmail.com <mailto:bennetch@gmail.com>> wrote: >> >> On Fri, Jul 11, 2014 at 8:21 AM, Chirayu Chiripal >> <chirayu.chiripal@gmail.com <mailto:chirayu.chiripal@gmail.com>> wrote: >> > Hi, >> > >> > From the discussion on RFE #781, it seems that without having select >> > access >> > to mysql database the user having only GRANT or CREATE USER rights >> > cannot >> > see the list of users. So, what do you think should to be displayed in >> > Users >> > tab, only create user? >> >> This seems good to me. > > > And what if user is having only GRANT privileges? If I correctly understand the MySQL privilege structure, what you're referring to is a situation where a user would be allowed to change privileges but can't see the list of other users. Obviously, that makes it difficult to provide a GUI for those users :)Its not only about list of other users, we can't also see what privileges they have.
Ah, quite right.
Actually, I maybe wrong with this assumption but I can't see use of such user (having GRANT_OPTION privilege but no SELECT on mysql database) in practical but this may happen accidentally.
That is my thought as well. I think this is something we should deal with appropriately (the message below, for instance), but not worry too much about.
If I'm correct, there's no way to deal with this. The best I think we can do is provide some text ("You have the GRANT_OPTION privilege but not SELECT on the mysql database. We are unable to show the list of users, but you can still write SQL directly." with a link to the MySQL documentation, perhaps). That's the best idea I can come up with off hand.This seems good to me too.
Of course, I've been interrupted five times writing these two paragraphs, so I may be answering a completely different question at this point...
Phpmyadmin-devel mailing list Phpmyadmin-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/phpmyadmin-devel