Oracle 5.0 Reference Manual Download

Page: 598 / 3232

Privileges Provided by MySQL

578

• The

SELECT

[578]

privilege enables you to select rows from tables in a database.

SELECT

statements require the

SELECT

[578]

privilege only if they actually retrieve rows from a table. Some

SELECT

statements do not access tables and can be executed without permission for any database.

For example, you can use

SELECT

as a simple calculator to evaluate expressions that make no

reference to tables:

SELECT 1+1;

SELECT PI()*2;

The

SELECT

[578]

privilege is also needed for other statements that read column values.

For example,

SELECT

[578]

is needed for columns referenced on the right hand side of

col_name

expr

assignment in

UPDATE

statements or for columns named in the

WHERE

clause of

DELETE

UPDATE

statements.

• The

SHOW DATABASES

[578]

privilege enables the account to see database names by issuing the

SHOW DATABASE

statement. Accounts that do not have this privilege see only databases for which

they have some privileges, and cannot use the statement at all if the server was started with the

skip-show-database

[421]

option. Note that any global privilege is a privilege for the database.

• The

SHOW VIEW

[578]

privilege enables use of

SHOW CREATE VIEW

. This privilege was added in

MySQL 5.0.1.

• The

SHUTDOWN

[578]

privilege enables use of the

mysqladmin shutdown

command. There is no

corresponding SQL statement.

• The

SUPER

[578]

privilege enables an account to use

CHANGE MASTER TO

KILL

mysqladmin

kill

to kill threads belonging to other accounts (you can always kill your own threads),

PURGE

BINARY LOGS

, configuration changes using

SET GLOBAL

to modify global system variables, the

mysqladmin debug

command, enabling or disabling logging, performing updates even if the

read_only

[488]

system variable is enabled, starting and stopping replication on slave servers,

specification of any account in the

DEFINER

attribute of stored programs and views, and enables

you to connect (once) even if the connection limit controlled by the

max_connections

[467]

system

variable is reached.

To create or alter stored routines if binary logging is enabled, you may also need the

SUPER

[578]

privilege, as described in

Section 18.6, “Binary Logging of Stored Programs”

• The

UPDATE

[578]

privilege enables rows to be updated in tables in a database.

• The

USAGE

[578]

privilege specifier stands for “no privileges.” It is used at the global level with

GRANT

to modify account attributes such as resource limits or SSL characteristics without affecting

existing account privileges.

It is a good idea to grant to an account only those privileges that it needs. You should exercise
particular caution in granting the

FILE

[577]

and administrative privileges:

• The

FILE

[577]

privilege can be abused to read into a database table any files that the MySQL

server can read on the server host. This includes all world-readable files and files in the server's data
directory. The table can then be accessed using

Oracle 5.0, Reference Manual

Search results

Summary of Contents for 5.0

Reviews:

Related manuals for 5.0

Brands by name

Popular brands