Hello, all: It seems that the 4.0.11a Gamma release on Windows allows all users to connect, even though they don't have connect permissions in the user table. Could this be right?
I'm running on WinXP. I apologize - I'm new to MySQL, so please let me know if I am reading the documentation incorrectly. http://www.mysql.com/doc/en/Privileges.html Comment lines are preceded by // in this example // connect to MySQL without providing a username or password C:\mysql\bin>mysql Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 25 to server version: 4.0.11-gamma-nt Type 'help;' or '\h' for help. Type '\c' to clear the buffer. // note that MySQL does not know who we are mysql> select current_user(); +----------------+ | current_user() | +----------------+ | @127.0.0.1 | +----------------+ 1 row in set (0.00 sec) mysql> use mysql; Database changed // verify that the user table is completely locked down mysql> select user, host from user; +------+-----------+ | user | host | +------+-----------+ | root | localhost | +------+-----------+ 1 row in set (0.00 sec) // we're not an authenticated user, but we can create tables mysql> create table a (a char(10)); Query OK, 0 rows affected (0.03 sec) // we can insert into these tables mysql> insert into a values ("abc"); Query OK, 1 row affected (0.00 sec) mysql> select * from a; +------+ | a | +------+ | abc | +------+ 1 row in set (0.00 sec) // we can even create new users mysql> insert into user (user, host) values ("fred", "foo"); Query OK, 1 row affected (0.00 sec) mysql> select user, host from user; +------+-----------+ | user | host | +------+-----------+ | fred | foo | | root | localhost | +------+-----------+ 2 rows in set (0.00 sec) Am I doing something wrong, or is this a nasty bug? -ms Michael Shulman --------------------------------------------------------------------- Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail <[EMAIL PROTECTED]> To unsubscribe, e-mail <[EMAIL PROTECTED]> Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
