Hi Marc & list,
About the "CREATE TEMPORARY TABLES" privilege: I mixed something up here, it's completely independant from the CREATE privilege. The only advise I can give you is to revoke the global CREATE TEMPORARY TABLES privilege from all non-superusers and grant it to them on those databases they may access.
-----Original Message----- From: Marc Delisle
Rabus wrote:
My report: http://bugs.mysql.com/179
Let's see, what they'll say about it :-)
Well, after reading their answer, I guess we will have to rely on something else to set $is_superuser, like selecting records from mysql.user.
We will have the same problem with users having a SHOW DATABASES privilege. Why not checking the current user's record in the user table, if we can access it? This should be the safest way. Regards,
Alexander M. Turek alex@bugfixes.info
+-----------------------------+ | The phpMyAdmin Project | | http://www.phpmyadmin.net | | rabus@users.sourceforge.net | +-----------------------------+ | [bugfixes.info] | | http://www.bugfixes.info | | rabus@bugfixes.info | +-----------------------------+