Bug #28242 Simple question
Submitted: 4 May 2007 14:23 Modified: 4 May 2007 16:30
Reporter: Thoko Mzimela Email Updates:
Status: Not a Bug Impact on me:
None 
Category:MySQL Server: Security: Privileges Severity:S3 (Non-critical)
Version:5.0.37 OS:Windows
Assigned to: CPU Architecture:Any
Tags: privileges

[4 May 2007 14:23] Thoko Mzimela
Description:
Hi there,

I am currently working on MySQL databases that are a real mess! Each user[about 50 of them] has global privileges on different levels. Some even have ALL PRIVILEGES.
So because this cause "seriously harmful" security issues [and this is live data] - I cannot just delete all users or unused databases.

What I am trying to do is transfer some global users to database_level users and only assign the necessary databases to that user name! In the end, my DBA user name should be the only one with administrative rights on a gloval level.

Firstly is this a good idea. Secondly, there is a problem of some of these user names being used for administrative reasons in company scripts [I cant just get rid of them].
So now is there a way of revoking databases from a user even though they are on a global level? 

Please say yes - this is a nightmare!

How to repeat:
Hi there,

I am currently working on MySQL databases that are a real mess! Each user[about 50 of them] has global privileges on different levels. Some even have ALL PRIVILEGES.
So because this cause "seriously harmful" security issues [and this is live data] - I cannot just delete all users or unused databases.

What I am trying to do is transfer some global users to database_level users and only assign the necessary databases to that user name! In the end, my DBA user name should be the only one with administrative rights on a gloval level.

Firstly is this a good idea. Secondly, there is a problem of some of these user names being used for administrative reasons in company scripts [I cant just get rid of them].
So now is there a way of revoking databases from a user even though they are on a global level? 

Please say yes - this is a nightmare!
[4 May 2007 16:30] Valeriy Kravchuk
We're sorry, but the bug system is not the appropriate forum for asking help on using MySQL products. Your problem is not the result of a bug. Please, read the manual, http://dev.mysql.com/doc/refman/5.0/en/request-access.html. I hope, that section will answer all your questions.

Support on using our products is available both free in our forums at http://forums.mysql.com/ and for a reasonable fee direct from our skilled support engineers at http://www.mysql.com/support/

Thank you for your interest in MySQL.