Oracle 5.0, Reference Manual

Page: 1173 / 3232

Account Management Statements
1153
Privilege Meaning
DELETE
[577] Enable use of
DELETE
DROP
[577] Enable databases, tables, and views to be dropped
EXECUTE
[577] Enable the user to execute stored routines
FILE
[577] Enable the user to cause the server to read or write files
GRANT OPTION
[577] Enable privileges to be granted to or removed from other accounts
INDEX
[577] Enable indexes to be created or dropped
INSERT
[577] Enable use of
INSERT
LOCK TABLES
[577] Enable use of
LOCK TABLES
on tables for which you have the
SELECT
privilege
PROCESS
[577] Enable the user to see all processes with
SHOW PROCESSLIST
REFERENCES
[577] Not implemented
RELOAD
[577] Enable use of
FLUSH
operations
REPLICATION
CLIENT
[577]
Enable the user to ask where master or slave servers are
REPLICATION SLAVE
[577] Enable replication slaves to read binary log events from the master
SELECT
[578] Enable use of
SELECT
SHOW DATABASES
[578] Enable
SHOW DATABASES
to show all databases
SHOW VIEW
[578] Enable use of
SHOW CREATE VIEW
SHUTDOWN
[578] Enable use of
mysqladmin shutdown
SUPER
[578] Enable use of other administrative operations such as
CHANGE
MASTER TO
,
KILL
,
PURGE BINARY LOGS
,
SET GLOBAL
, and
mysqladmin debug
command
UPDATE
[578] Enable use of
UPDATE
USAGE
[578] Synonym for “no privileges”
The
EXECUTE
[577] privilege is not operational until MySQL 5.0.3.
CREATE VIEW
[577] and
SHOW
VIEW
[578] were added in MySQL 5.0.1.
CREATE USER
[576] ,
CREATE ROUTINE
[576] , and
ALTER
ROUTINE
[576] were added in MySQL 5.0.3.
In
GRANT
statements, the
ALL [PRIVILEGES]
[576] privilege is named by itself and cannot be
specified along with other privileges. It stands for all privileges available for the level at which privileges
are to be granted except for the
GRANT OPTION
[577] privilege.
USAGE
[578] can be specified to create a user that has no privileges, or to specify the
REQUIRE
or
WITH
clauses for an account without changing its existing privileges.
MySQL account information is stored in the tables of the
mysql
database. This database and the
access control system are discussed extensively in Section 6.2, “The MySQL Access Privilege
System” , which you should consult for additional details.
If the grant tables hold privilege rows that contain mixed-case database or table names and the
lower_case_table_names
[466] system variable is set to a nonzero value,
REVOKE
cannot be used
to revoke these privileges. It will be necessary to manipulate the grant tables directly. (
GRANT
will not
create such rows when
lower_case_table_names
[466] is set, but such rows might have been
created prior to setting that variable.)
Privileges can be granted at several levels, depending on the syntax used for the
ON
clause. For
REVOKE
, the same
ON
syntax specifies which privileges to take away. The examples shown here
include no
IDENTIFIED BY 'password'
clause for brevity, but you should include one if the
account does not already exist, to avoid creating an insecure account that has no password.