[Phpmyadmin-devel] Access to Server > Users > User groups tab

[Marc Delisle]

Le 2014-07-14 09:24, Chirayu Chiripal a écrit :
> On Mon, Jul 14, 2014 at 4:06 AM, Marc Delisle <marc at infomarc.info
> <mailto:marc at infomarc.info>> wrote:
> 
>     Le 2014-07-13 17:45, Chirayu Chiripal a écrit :
>     > On Mon, Jul 14, 2014 at 3:14 AM, Chirayu Chiripal
>     > <chirayu.chiripal at gmail.com <mailto:chirayu.chiripal at gmail.com>
>     <mailto:chirayu.chiripal at gmail.com
>     <mailto:chirayu.chiripal at gmail.com>>> wrote:
>     >
>     >     Hi,
>     >
>     >     Is everyone allowed to access Server > Users > User groups tab
>     ? And
>     >     if yes, Why?
>     >
>     >
>     > I mean every logged in user.
> 
>     Hi Chirayu,
> 
>     Not everyone is allowed access. If you have found a problem with this,
>     please send the details to security at phpmyadmin.net
>     <mailto:security at phpmyadmin.net>.
> 
> 
> In that case, I would also like to know which user can access Server >
> Users > User groups tab to test this further. Is it superuser (i.e. one
> with SELECT privilege on mysql database) only?

For MySQL and MariaDB, only a superuser (which has the SELECT privilege
on mysql.user) sees the Users menu.

For Drizzle, the isSuperuser() function always returns "true".

-- 
Marc Delisle | phpMyAdmin