On Thu, 25 Nov 1999, Darrell LaRock wrote:
>
>I was able to assign a password for the root account. My problem came in that
>anyone could just run mysql and it never prompted them for a password.
>
>This is what I did to rectify the problem. I logged in as root into the mysql
>database.
>
>I then updated the password field for all other users by this command.
>
>update user set Password=password('password') where User!='root';
>
>now this prevented access to any of the databases by just typing mysql. However
>anyuser can use this to get in to mysql by using this command.
>
> mysql -u <anynameworks> -p <database>
> when prompted for a password enter password
>
>How can I eliminate this. I do not want anyone to access mysql unless I have
>setup an account. Should I modify the user table to eliminate the entry that
>has no user name specified?
>
>
> Thanks
>
> darrell
>
>
Hi!
First of all, do eliminate anonymous users, those users that have '' for user
column in user table.
Next, if you have version 3.22.10 or higher of MySQL, you can use GRANT command
to grant privileges and REVOKE to revoke them.
Regarding preventing users to use some databases, you have to revoke their
globar rights and grant only database rights. Read a manual on the subject !
--
Sinisa
+----------------------------------------------------------------------+
| TcX ____ __ _____ _____ ___ == mysql@stripped |
| /*/\*\/\*\ /*/ \*\ /*/ \*\ |*| Sinisa Milivojevic |
| /*/ /*/ /*/ \*\_ |*| |*||*| mailto:sinisa@stripped|
| /*/ /*/ /*/\*\/*/ \*\|*| |*||*| Larnaka, Cyprus |
| /*/ /*/ /*/\*\_/*/ \*\_/*/ |*|____ |
| ^^^^^^^^^^^^/*/^^^^^^^^^^^\*\^^^^^^^^^^^ |
| /*/ \*\ Developers Team |
+----------------------------------------------------------------------+
