title: MySQL User with select privileges can still update
body: <p>I have an OpenShift app with a MySQL database that I configured an ODBC connection for, such that users can use Access as a read only front end to the tables. I created such a user, but they are able to update data from the Access front end and it is reflected in the database. Here's what I did:</p>
  
  <p>I created a user named 'reports', to be given read only access to only one schema, 'reviews'.</p>
  
  <pre><code>GRANT SELECT ON reviews.* TO reports@'%' IDENTIFIED BY `password`;
  </code></pre>
  
  <p>When I run</p>
  
  <pre><code>SELECT * FROM mysql.user WHERE user = 'reports';
  </code></pre>
  
  <p>I get all N's and 0's. I understand there's no 'Y' for "Select_priv" because it's not a global select priv, only on one schema, so I figured it was okay.</p>
  
  <p>When I run</p>
  
  <pre><code>SHOW GRANTS FOR 'reports'@'%';
  </code></pre>
  
  <p>I get</p>
  
  <blockquote>
    <p>GRANT USAGE ON <em>.</em> TO 'reports'@'%' IDENTIFIED BY PASSWORD 'stringstringstring'<br>
    GRANT SELECT ON 'reviews'.* TO 'reports'@'%';</p>
  </blockquote>
  
  <p>Which I expected.</p>
  
  <pre><code>SELECT * FROM db where User = 'reports';
  </code></pre>
  
  <blockquote>
    <p>|Host|Db     |User   |Select_priv|Insert_priv|Update_priv|...<br>
    |%   |reviews|reports|Y          |N          |N          |...</p>
  </blockquote>
  
  <p>But when I go into Access, edit some data, then ssh into the database and view the database, the UPDATES are working.</p>
  
  <p>I am using <code>rhc port-forward -a applicationname</code> before I connect in Access, and I use <code>rhc ssh applicationname</code> to view the MySQL from the server.</p>