Use GRANT and REVOKE statements for privilege editing #76

New Issue

oysteikt · 2024-08-19T16:59:05+02:00

oysteikt commented

2024-08-19 16:59:05 +02:00

The current implementation modifies mysql.db directly with INSERT, UPDATE and DELETE statements. It would be much less error prone to use GRANT and REVOKE statements, as well as requiring less privileges for the admin database user used to perform privileged actions.

The current implementation modifies `mysql.db` directly with `INSERT`, `UPDATE` and `DELETE` statements. It would be much less error prone to use `GRANT` and `REVOKE` statements, as well as requiring less privileges for the admin database user used to perform privileged actions.

oysteikt added the security label 2024-08-19 16:59:05 +02:00

oysteikt commented

2025-11-10 17:16:48 +01:00

There is also SHOW GRANTS

Note that this might be a bit more complicated than I initially considered, because I don't think we can run REGEXP on the SCHEMA_NAME anymore?

There is also `SHOW GRANTS` Note that this might be a bit more complicated than I initially considered, because I don't think we can run `REGEXP` on the `SCHEMA_NAME` anymore?

oysteikt commented

2025-11-25 12:18:55 +01:00

Maybe split it up into two separate database calls, one for querying the user's databases and one for showing grants? it's a bit of unnecessary data shuffling, but maybe the tradeoff is worth it

Sign in to join this conversation.

No Assignees

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Projects/muscl#76

Use GRANT and REVOKE statements for privilege editing #76

Use `GRANT` and `REVOKE` statements for privilege editing #76