[Phpmyadmin-devel] Should a user be able to remove their own privileges?

Isaac Bennetch bennetch at gmail.com
Wed Jul 16 23:45:53 CEST 2014


Bringing this to phpmyadmin--devel for further discussion. This is
specifically related to implementing feature request 1488 "User
privilege tab not shown in all relevant cases" [1]

On 7/16/14, 4:00 PM, Chirayu Chiripal wrote:
> Does it makes sense, to allow a user to revoke some of the global
> privileges from himself?

I think ideally, we would allow this but display a message warning that
it's a bad idea. Something like "You are attempting to remove privileges
from the user with which you are currently logged in. This is generally
a bad idea and might result in you being unable to log in or change
privileges. Are you sure you wish to remove these privileges?"

I can't think of a scenario when a user would actually want to do this;
but just because it's a bad idea doesn't mean we should prevent the user
from doing it, right? Or in this case, is it reasonable to disallow this
action?

What does everyone else think?

1 - https://sourceforge.net/p/phpmyadmin/feature-requests/1488/




More information about the Developers mailing list