Use The Grant Tables

• The server uses the grant tables in the following manner:
  • The user table scope columns determine whether to reject or allow incoming connections.
    • For allowed connections, any privileges granted in the user table indicate the user's global (superuser) privileges.
    • Any privilege granted in this table applies to all databases on the server.
  • The db table scope columns determine which users can access which databases from which hosts.
    • The privilege columns determine which operations are allowed.
    • A privilege granted at the database level applies to the database and to all its tables.
  • The host table is used in conjunction with the db table to apply a given db table row to several hosts.
    • The host table must be modified directly with statements such as INSERT, UPDATE, and DELETE.
    • It is not affected by statements such as GRANT and REVOKE that modify the grant tables indirectly.
    • Most MySQL installations need not use this table at all.
  • The tables_priv and columns_priv tables are similar to the db table, but are more fine-grained.
    • They apply at the table and column levels rather than at the database level.
      • A privilege granted at the table level applies to the table and to all its columns.
      • A privilege granted at the column level applies only to a specific column.
  • The procs_priv table applies to stored routines.
    • A privilege granted at the routine level applies only to a single routine.

Why are RELOAD, SHUTDOWN, and FILE privileges stored in the user table?

---

---

© 2007 John Michael Pierobon

Notes