0

On workbench I connect to my Database, there I have defined some functions as superuser. Then I set up a readuser that have execute permissions on these functions. But I don't want readuser to be able to alter those funcs. When I connect using the readuser, he can list the functions in the schemas tree, he can also execute the function and see the results.

The problem is that he cannot right click on those functions and select on the menu

Copy to Clipboard>Function call

or

Send to SQL Editor>Function call

this is very unhandy since the readuser cannot see what are the parameters needed for the function to be executed.

Do you have any suggestion on how to workout on permissions (or else?) to resolve this?

Many thanks

koalaok
  • 5,075
  • 11
  • 47
  • 91
  • So, you say, if a user has no alter privilege the copy-to-clipboard feature is not available (disabled menu entry?)? If so it might require some changes there and you should file a bug report (http://bugs.mysql.com). – Mike Lischke Jan 15 '16 at 08:48
  • no actually the menu entries are there and enabled, but nothing happens. No copy, no send to SQL editor of the string funcCall(param01 type, ...). i.e. readuser can only see (and execute them) the func names in schemas tree but don't know what are the requested params to call. So i wonder if there's some other option to tweak his permissions... Or if it's just a workbench client issue – koalaok Jan 15 '16 at 09:00
  • Oh, then it's definitely a bug. – Mike Lischke Jan 15 '16 at 10:43
  • not a bug, see my own answer below. Thanks – koalaok Jan 15 '16 at 14:20

1 Answers1

0
GRANT EXECUTE ON PROCEDURE schema_name.proc_name TO 'user_name';
GRANT SELECT ON mysql.proc to 'user_name';

What was missing was the second line of GRANT.

This is similaer/duplicate of:

How to grant execute on specific stored procedure to user

Community
  • 1
  • 1
koalaok
  • 5,075
  • 11
  • 47
  • 91