Le 11 juil. 2014 22:15, "Isaac Bennetch" <bennetch@gmail.com> a écrit :
>
>
>
> On 7/11/14, 4:10 PM, Chirayu Chiripal wrote:
> > On Fri, Jul 11, 2014 at 7:15 PM, Isaac Bennetch <bennetch@gmail.com
> > <mailto:bennetch@gmail.com>> wrote:
> >
> > On Fri, Jul 11, 2014 at 9:24 AM, Chirayu Chiripal
> > <chirayu.chiripal@gmail.com <mailto:chirayu.chiripal@gmail.com>> wrote:
> > > On Fri, Jul 11, 2014 at 6:46 PM, Isaac Bennetch
> > <bennetch@gmail.com <mailto:bennetch@gmail.com>> wrote:
> > >>
> > >> On Fri, Jul 11, 2014 at 8:21 AM, Chirayu Chiripal
> > >> <chirayu.chiripal@gmail.com <mailto:chirayu.chiripal@gmail.com>>
> > wrote:
> > >> > Hi,
> > >> >
> > >> > From the discussion on RFE #781, it seems that without having
> > select
> > >> > access
> > >> > to mysql database the user having only GRANT or CREATE USER rights
> > >> > cannot
> > >> > see the list of users. So, what do you think should to be
> > displayed in
> > >> > Users
> > >> > tab, only create user?
> > >>
> > >> This seems good to me.
> > >
> > >
> > > And what if user is having only GRANT privileges?
> >
> > If I correctly understand the MySQL privilege structure, what you're
> > referring to is
> > a situation where a user would be allowed to change privileges but
> > can't see the list
> > of other users. Obviously, that makes it difficult to provide a GUI
> > for those users :)
> >
> >
> > Its not only about list of other users, we can't also see what
> > privileges they have.
>
> Ah, quite right.
>
> > Actually, I maybe wrong with this assumption but I
> > can't see use of such user (having GRANT_OPTION privilege but no SELECT
> > on mysql database) in practical but this may happen accidentally.
>
> That is my thought as well. I think this is something we should deal
> with appropriately (the message below, for instance), but not worry too
> much about.
>
> >
> >
> > If I'm correct, there's no way to deal with this. The best I think we
> > can do is provide
> > some text ("You have the GRANT_OPTION privilege but not SELECT on
> > the mysql
> > database. We are unable to show the list of users, but you can still
> > write SQL directly."
> > with a link to the MySQL documentation, perhaps). That's the best idea
> > I can come up
> > with off hand.
> >
> >
> > This seems good to me too.
> >
> >
> > Of course, I've been interrupted five times writing these two
> > paragraphs, so I may be
> > answering a completely different question at this point...
Hi,
I agree with Isaac. This is a strange case, but let's manage it simply by displaying a message and forwarding the user to SQL console.
Hugues.