views:

10

answers:

1

Because of a problem i had with mysql i need to use flush. I discovered the user cannot use flush without the reload permission. and to give it to him my syntax was

grant reload on *.* to 'webapp_wt'@'localhost';

I couldnt do specific_db.*. And granting this kind of permission doesnt feel right. Is there anything wrong with this? Is it possible for this mysql user to cause problems? (outside of the db i gave it permissions to).

-edit- exactly one view and one answer (and its good!) in 45mins. I am amused.

Is there a way to grant flush tables but nothing else?

A: 

As it is a server administration thing, you indeed cannot grant it to specific databases/tables (much of which you can do with RELOAD would not make sense for a specific databse or table).

And yes, a user can seriously hinder performance with repeatedly FLUSH'ing tables or FLUSH QUERY CACHE, and can possibly break (lagging) replication with FLUSH MASTER.

Wrikken
Is there a way to allow flush tables but nothing else?
acidzombie24
so the worse that can happen is hinder performance. Not actually break replication, binary logs, etc?
acidzombie24
Even with solely FLUSH TABLES (which I don't think is possible), a `FLUSH TABLES WITH READ LOCK` effectively blocks all alterations on the database, still not something you'd want.
Wrikken