Why does a new user allow ALTER by default?

Jason210's profile image Jason210 posted 4 years ago in Feature discussion Permalink

I'm just curious as to why a new user, created with the User Manager tool, includes ALTER as a privilege, but not insert or update? It seems that either a default user should either have a range of useful write tools, or none at all.

ansgar's profile image ansgar posted 4 years ago Permalink

There is no such thing as a "default user". In the user manager, if you just click the "Add" button and nothing else, you will get a user without any privilege marked:

Description

Jason210's profile image Jason210 posted 4 years ago Permalink

That's true and also weird because the first time I tried it, I had all the view items plus ALTER generated in the code. I copied dowm:

CREATE USER 'Jason'@'localhost' IDENTIFIED BY '4OmIzI'; GRANT ALTER, SHOW VIEW, SHOW DATABASES, SELECT, PROCESS, EXECUTE ON . TO 'Jason'@'localhost';

FLUSH PRIVILEGES;

ansgar's profile image ansgar posted 4 years ago Permalink

Maybe you clicked the "Clone" button, not "Add".

Please login to leave a reply, or register at first.