[Phpmyadmin-devel] CREATE TEMPORARY TABLE global priv

Rabus rabus at bugfixes.info
Mon Mar 24 06:54:20 CET 2003

Hi Marc & list,

About the "CREATE TEMPORARY TABLES" privilege: I mixed something up
here, it's completely independant from the CREATE privilege.
The only advise I can give you is to revoke the global CREATE TEMPORARY
TABLES privilege from all non-superusers and grant it to them on those
databases they may access.

-----Original Message-----
From: Marc Delisle
> Rabus wrote:
> >
> > My report:
> > http://bugs.mysql.com/179
> >
> > Let's see, what they'll say about it :-)
> Well, after reading their answer, I guess we will have to
> rely on something else to set $is_superuser, like selecting
> records from mysql.user.

We will have the same problem with users having a SHOW DATABASES
Why not checking the current user's record in the user table, if we can
access it? This should be the safest way.

Alexander M. Turek
<alex at bugfixes.info>

| The phpMyAdmin Project      |
| http://www.phpmyadmin.net   |
| rabus at users.sourceforge.net |
| [bugfixes.info]             |
| http://www.bugfixes.info    |
| rabus at bugfixes.info         |

More information about the Developers mailing list