Security Bypass MS Excel Power Query connected to MySQL

0
votes

SETUP:

MySQL DB in google cloud 5.6.3

Microsoft Excel 2013

Power Query Plug in.

MySQL user ODBC

Privileges = GRANT SELECT on SchemaName.TableName TO ODBC@'%'

ODBC connection made to the MySQL server by using Power Query > From Other Sources > From ODBC > Select Cloud MySQL server from DSN list.

Problem:

In the next screen "Table Navigator". The window not only lists all tables in the Schema, but also allows me to load each and every table successfully.

Connecting through the exact same steps but instead using the standard excel data menu option > from other source I am restricted to only the TableName as expected.

Trying to connect to any other table with windows, ODBC manager, also yields a denied connection as expected.

Question:

Is this some kind of security bypassing bug that is allowing this Power Query plugin to some how bypass my MySQL user Grant privileges statement?

Is my expectation of User Grant as a "Security" mechanism falsely placed.

Or am I just doing something wrong, and need to do privileges a different way in MySQL to have it actually secure???

1
mysqlexcelodbcmysql-workbenchpowerquery

1 Answers

0
votes

Power Query doesn't do anything to bypass security mechanisms, so it is likely a configuration issue on the server.

If you have the latest version of Power Query (2.33 or higher), you can right-click on a step and choose "View Native Query" to see what query is being sent. This can help you reproduce the issue outside of Power Query.