On 14 Oct 2002, at 11:00, Brian Scott wrote:

> Example: if test_db exists, any user with permission to access test_db 
> seems to be permitted to create "test?db" regardless of permissions.

It's not the question mark that's causing the problem -- it's the 
underscore.  And it's not a bug:

#   Please note: the `_' and `%' wildcards are allowed when
#   specifying database names in GRANT commands. This means that if
#   you wish to use for instance a `_' character as part of a
#   database name, you should specify it as `\_' in the GRANT
#   command, to prevent the user from being able to access
#   additional databases matching the wildcard pattern, e.g.,
#   GRANT ... ON `foo\_bar`.* TO ....

http://www.mysql.com/doc/en/GRANT.html

[Filter fodder: SQL]

-- 
Keith C. Ivey <[EMAIL PROTECTED]>
Tobacco Documents Online
http://tobaccodocuments.org

---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to