473,513 Members | 2,708 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

preventing direct access to tables

-
how does one prevent someone from directly inserting into a table such
that any inserts should be passed to a stored procedure e.g
insert_data(....)

i have read the manual on revoke, grant but couldn't grasp the idea.
Jul 23 '05 #1
1 1596
- wrote:
how does one prevent someone from directly inserting into a table such
that any inserts should be passed to a stored procedure e.g
insert_data(....)


As far as I can tell, MySQL does not support this. For this to work you
would need to grant INSERT privilege to the _procedure_, not to a user,
and then use GRANT EXECUTE to give the user privilege to run that procedure.

Unfortunately, the syntax documentation for GRANT shows that there is
neither support for GRANT EXECUTE, nor giving privileges to anything
besides a user. I'm guessing if they want to support this, it will
require a restructuring of the privilege tables in the system 'mysql'
database to support this.

For the time being, a MySQL stored procedure with an INSERT to a table
will fail unless the user executing the procedure has that privilege on
that table.

Regards,
Bill K.
Jul 23 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
2670
by: acrocker | last post by:
I would like to provide access to users who need to be taken directly to the relevant page without further navigation instructions. Unfortunately the page I want to access is built using a...
4
1640
by: Trevor Williams | last post by:
I have a split database which has some rudimentary security in place which prevents unauthorised users from double-clicking the data file and seeing anything worthwhile. If they do this a popup...
1
1643
by: Petri | last post by:
Dear newsreaders, Access to aspx-pages can be prevented for example checking authentication cookie on page_onload part of code. But is there any way to prevent direct access to indivual files...
5
2127
by: www.douglassdavis.com | last post by:
I have an idea for preventing sql injection attacks, however it would have to be implemented by the database vendor. Let me know if I am on the right track, this totally off base, or already...
2
1345
by: bill | last post by:
I am using vb.net and SQL Server 2000. Hopefully i will soon be using VB.net 2005. I would like to prevent users from having direct access to a SQL Server database, and require them to access...
4
1369
by: Kevin Audleman | last post by:
My site has come under attack from sql injections. I thought I had things handled by replacing all single quotes with two single quotes, aka Replace(inputString, "'", "''") Alas, clever...
8
13214
by: mark_aok | last post by:
Hi all, I have a split database. Both the forms, and the tables are stored on a shared network drive (this is Access 2003). The users use the forms, and the tables on the network drive, there...
2
2060
by: thread | last post by:
Hi All i'm building a database in access and i want to restrict permissions. from the access i can just limit the posiblity to unhide an hidden table and in this way i can preventing the users...
1
1431
by: thread | last post by:
what is the best way to secure a core table and preventing from the users to view/export information when there is stand along application(not a centralized access database
0
7259
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
1
7098
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
7523
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
0
5683
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...
1
5085
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new...
0
4745
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and...
0
3232
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The...
0
3221
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
0
455
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.