Bug #54141 Unable to grant individual global privileges
Submitted: 1 Jun 2010 13:14 Modified: 23 Jul 2012 19:26
Reporter: Greg Thomas Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Workbench: Administration Severity:S3 (Non-critical)
Version:5.2.21 OS:Any
Assigned to: Alfredo Kojima CPU Architecture:Any
Tags: privilege

[1 Jun 2010 13:14] Greg Thomas
Description:
Using the Server Administration functionality of workbench, it's possible to grant "groups" of global privileges, indicated by roles (i.e. DBA, MaintenanceAdmin, etc.).

However, it's not possible to grant an individual global privilege.

e.g. to grant a user "FILE" global privilege, it's necessary, if using the GUI, to apply the complete set of "DBA" global privileges - which could be far far more than required.

How to repeat:
Open the Server Administration screen.

Note that there is no way to add/remove individual global privileges.

Workaround: Use the command line, e.g. 

GRANT FILE ON *.* TO username;

Suggested fix:
In addition to the "Administration Roles" tab in the Server Admin screen, add a new tab "Global Privileges", which enumerate the individual privileges.
[2 Jun 2010 8:42] Susanne Ebrecht
Many thanks for writing a bug report.

You are right there is no option yet to GRANT separate commands to a single user.
[23 Jul 2012 19:26] Philip Olson
This has been fixed as of the soon-to-be-released Workbench 5.2.41, and 
here's the changelog entry:

A "Global Privileges" tab was added to
the "Server Administration" interface. It
allows adding and editing individual global user privileges.