>>>>> "Benjamin" == Benjamin Pflugmann <philemon@stripped> writes:
<cut>
Benjamin> This section fits also to this matter (7.26 GRANT and REVOKE syntax):
Benjamin> ------------------------------------------------------------
Benjamin> In MySQL 3.22.12 or later, if a new user is created or if you have
Benjamin> global grant privileges, the user's password will be set to the
Benjamin> password specified by the IDENTIFIED BY clause, if one is given. If
Benjamin> the user already had a password, it is replaced by the new one.
Benjamin> ------------------------------------------------------------
Benjamin> This explains, why in a new created system 'test' may change 'root's
Benjamin> password: It was not set yet. But from how I understand the manual, he
Benjamin> should not be able to change it, when it was once set, without global
Benjamin> grant privilege, which - according to the manual - is different from
Benjamin> db grant privileges.
Hi!
A normal users should of course never be able to set the password for
root; My last patch fixes this.
Regards,
Monty
