Bug #13765 mysql-5.0.13 and mysql query browser 1.1.5
Submitted: 5 Oct 2005 8:47 Modified: 7 Oct 2005 0:49
Reporter: Rajen Shah Email Updates:
Status: Not a Bug Impact on me:
None 
Category:MySQL Administrator Severity:S2 (Serious)
Version:5.0.3 OS:Windows (Windows)
Assigned to: MySQL Verification Team CPU Architecture:Any

[5 Oct 2005 8:47] Rajen Shah 
Description:
I am using mysql-5.0.13 and mysql query browser 1.1.5 
I have created database test & table data  & user 'testing' 
I had given select and insert rights to 'testing' user with following command 
GRANT Select,Insert ON test.data TO testing 
I cross checked mysql.tables_priv table , there testing has only select and insert rights. 
when i login as testing , its allows me to delete record from test.data table. 
can u tell me , how can one delete records from test.data when he do not have delete rigths.

How to repeat:
I am using mysql-5.0.13 and mysql query browser 1.1.5 
I have created database test & table data  & user 'testing' 
I had given select and insert rights to 'testing' user with following command 
GRANT Select,Insert ON test.data TO testing 
I cross checked mysql.tables_priv table , there testing has only select and insert rights. 
when i login as testing , its allows me to delete record from test.data table. 
can u tell me , how can one delete records from test.data when he do not have delete rigths.
[7 Oct 2005 0:49] MySQL Verification Team 
This is expected behavior with a database called test and it is
documented  at:

http://dev.mysql.com/doc/mysql/en/default-privileges.html

---------------------------------------------------------------------------
On Windows, one anonymous account is for connections from the local host. It has all privileges, just like the root accounts. The other is for connections from any host and has all privileges for the test database or other databases with names that start with test.
On Unix, both anonymous accounts are for connections from the local host. Connections must be made from the local host by specifying a hostname of localhost for one account, or the actual hostname or IP number for the other. These accounts have all privileges for the test database or other databases with names that start with test_.
---------------------------------------------------------------------------