Comments on: Why you do not use GRANT ALL ON *.*? http://ronaldbradford.com/blog/why-you-do-not-use-grant-all-on-2008-09-23/ Expert times and information on MySQL Fri, 12 Mar 2010 22:45:29 -0400 http://wordpress.org/?v=2.8.4 hourly 1 By: Eric Lemoine http://ronaldbradford.com/blog/why-you-do-not-use-grant-all-on-2008-09-23/comment-page-1/#comment-428 Eric Lemoine Wed, 24 Sep 2008 07:09:18 +0000 http://ronaldbradford.com/blog/?p=1188#comment-428 According to the documentation (http://dev.mysql.com/doc/refman/5.0/en/grant.html) : The FILE, PROCESS, RELOAD, REPLICATION CLIENT, REPLICATION SLAVE, SHOW DATABASES, SHUTDOWN, SUPER, and CREATE USER privileges are administrative privileges that can only be granted globally (using ON *.* syntax). So if you grant ALL a user on specific objects (my_db.* or my_db.my_table), this user won't have the SUPER privilege. Eric According to the documentation (http://dev.mysql.com/doc/refman/5.0/en/grant.html) :

The FILE, PROCESS, RELOAD, REPLICATION CLIENT, REPLICATION SLAVE, SHOW DATABASES, SHUTDOWN, SUPER, and CREATE USER privileges are administrative privileges that can only be granted globally (using ON *.* syntax).

So if you grant ALL a user on specific objects (my_db.* or my_db.my_table), this user won’t have the SUPER privilege.

Eric

]]>