[Phpmyadmin-devel] CREATE TEMPORARY TABLE global priv

[Rabus]

Hi Marc & list,

About the "CREATE TEMPORARY TABLES" privilege: I mixed something up
here, it's completely independant from the CREATE privilege.
The only advise I can give you is to revoke the global CREATE TEMPORARY
TABLES privilege from all non-superusers and grant it to them on those
databases they may access.

-----Original Message-----
From: Marc Delisle
>
> Rabus wrote:
> >
> > My report:
> > http://bugs.mysql.com/179
> >
> > Let's see, what they'll say about it :-)
>
>
> Well, after reading their answer, I guess we will have to
> rely on something else to set $is_superuser, like selecting
> records from mysql.user.
>

We will have the same problem with users having a SHOW DATABASES
privilege.
Why not checking the current user's record in the user table, if we can
access it? This should be the safest way.
Regards,

Alexander M. Turek
<alex at bugfixes.info>

+-----------------------------+
| The phpMyAdmin Project      |
| http://www.phpmyadmin.net   |
| rabus at users.sourceforge.net |
+-----------------------------+
| [bugfixes.info]             |
| http://www.bugfixes.info    |
| rabus at bugfixes.info         |
+-----------------------------+