Le 2014-07-13 17:45, Chirayu Chiripal a écrit :

On Mon, Jul 14, 2014 at 3:14 AM, Chirayu Chiripal <chirayu.chiripal@gmail.com mailto:chirayu.chiripal@gmail.com> wrote:

Hi,

Is everyone allowed to access Server > Users > User groups tab ? And
if yes, Why?

I mean every logged in user.

Hi Chirayu,

Not everyone is allowed access. If you have found a problem with this, please send the details to security@phpmyadmin.net.

Le 2014-07-14 09:24, Chirayu Chiripal a écrit :

On Mon, Jul 14, 2014 at 4:06 AM, Marc Delisle <marc@infomarc.info mailto:marc@infomarc.info> wrote:

Le 2014-07-13 17:45, Chirayu Chiripal a écrit :
> On Mon, Jul 14, 2014 at 3:14 AM, Chirayu Chiripal
> <chirayu.chiripal@gmail.com <mailto:chirayu.chiripal@gmail.com>
<mailto:chirayu.chiripal@gmail.com
<mailto:chirayu.chiripal@gmail.com>>> wrote:
>
>     Hi,
>
>     Is everyone allowed to access Server > Users > User groups tab
? And
>     if yes, Why?
>
>
> I mean every logged in user.

Hi Chirayu,

Not everyone is allowed access. If you have found a problem with this,
please send the details to security@phpmyadmin.net
<mailto:security@phpmyadmin.net>.

In that case, I would also like to know which user can access Server > Users > User groups tab to test this further. Is it superuser (i.e. one with SELECT privilege on mysql database) only?

For MySQL and MariaDB, only a superuser (which has the SELECT privilege on mysql.user) sees the Users menu.

For Drizzle, the isSuperuser() function always returns "true".