MySQL ODBC Connector - question about "sql security"

Author

question about "sql security"

wangxu

2006-01-03, 8:24 pm

------ =_NextPart_000_00AB_
01C61118.75CB68B0
Content-Type: text/plain;
charset="gb2312"
Content-Transfer-Encoding: base64

SSByZWZlciBhIHF1ZXN0
aW9uIGFib3V0ICJzcWwg
c2VjdXJpdHkiIG9wdGlv
biBvZiBjcmVhdGUg
cHJvY2VkdXJlIHN5bnRh
eCBhdCAyMDA1LTEyLg0K
QnV0IGkgY2FuJ3QgcXVp
dGUgdW5kZXJzdG9v
ZCB3aXRoIHRoYXQgYW5z
d2VyLg0KQ2FuIHlvdSBn
aXZlIG1lIGEgZXhhbXBs
ZSB0byBkZXNjcmli
ZSB0aGUgZWZmZWN0IG9m
IHNldCAic3FsIHNlY3Vy
aXR5IiBvcHRpb24gPw==

------ =_NextPart_000_00AB_
01C61118.75CB68B0--

Gleb Paharenko

2006-01-04, 7:23 am

Hello.

In my opinion, a good description can be found here:
http://dev.mysql.com/tech-resources...procedures.html

"wangxu" <wangxu@itec.com.cn> wrote:

--
For technical support contracts, goto https://order.mysql.com/?ref=ensita
This email is sponsored by Ensita.NET http://www.ensita.net/
__ ___ ___ ____ __
/ |/ /_ __/ __/ __ \/ / Gleb Paharenko
/ /|_/ / // /\ \/ /_/ / /__ Gleb.Paharenko@ensita.net
/_/ /_/\_, /___/\___\_\___/ MySQL AB / Ensita.NET
<___/ www.mysql.com

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql? unsub...sie.nctu.edu.tw

Peter Brawley

2006-01-04, 7:23 am

>I refer a question about "sql security" option of create procedure syntax
>at 2005-12. But i can't quite understood with that answer.
>Can you give me a example to describe the effect of set "sql security"
>option ?

CREATE PROCEDURE
....
SQL SECURITY INVOKER
....

SQL SECURITY (compliance with SQL2003) specifies whether the user
privileges
of the author (DEFINER) or the INVOKER apply; the default is DEFINER.
Since 5.0.3,
MySQL has supported GRANTs for CREATE, ALTER and EXECUTE. The first
includes the latter two.

If binary logging in enabled, see
http://dev.mysql.com/doc/refman/5.0...e-logging.html.

PB

-----

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.11/219 - Release Date: 1/2/2006

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql? unsub...sie.nctu.edu.tw

Sponsored Links