Stored Procedures og sikkerhed (GRANT)

Mest af alt kan jeg se mit spørgsmål omhandler brugen af wildcards/jokertegn.

Her er forskelligt fra dokumentationen, hvor der henvises til forskellige anvendelser af wildcards.

Tilsyneladende er _ og % brugbar for databasedelen, og * for databaseobjekter. Er der nogen der kan belyse det nærmere?




The "_" and "%" wildcards are allowed when specifying database names in GRANT statements that grant privileges at the global or database levels. This means, for example, that if you want to use a "_" character as part of a database name, you should specify it as "\_" in the GRANT statement, to prevent the user from being able to access additional databases matching the wildcard pattern; for example, GRANT ... ON `foo\_bar`.* TO ....

To accommodate granting rights to users from arbitrary hosts, MySQL supports specifying the user value in the form user_name@host_name. If a user_name or host_name value is legal as an unquoted identifier, you need not quote it. However, quotes are necessary to specify a user_name string containing special characters (such as "-"), or a host_name string containing special characters or wildcard characters (such as "%"); for example, 'test-user'@'test-hostname'. Quote the username and hostname separately.

You can specify wildcards in the hostname. For example, user_name@'%.loc.gov' applies to user_name for any host in the loc.gov domain, and user_name@'144.155.166.%' applies to user_name for any host in the 144.155.166 class C subnet.

The simple form user_name is a synonym for user_name@'%'.

MySQL does not support wildcards in usernames. Anonymous users are defined by inserting entries with User='' into the mysql.user table or by creating a user with an empty name with the GRANT statement:

Ok, tror jeg har fundet svar.

http://stackoverflow.com/questions/1489427/can-wildcards-be-used-on-tablenames-for-a-grant-in-mysql

På objektniveau er det alle eller en. * bruges for alle.

Wildcards _ og % kan kun bruges på database-niveau.

Håber der kommer en løsning på det på et tidspunkt.