MariaDB 10.4 Reverse Privileges (DENY)

Wednesday 12:20 PM - 1:10 PM

@ Dow


50 minutes conference



How do you exclude one table access from a database with too many tables? In previous versions of MariaDB and MySQL, you have to specifically grant access to all other tables individually. This does not scale, especially if tables are created and dropped frequently.

Reverse privileges solve this problem and many other use cases. With just one SQL statement you can ensure a user can never access a resource, regardless which roles or other privileges are granted to it.

Reverse privileges do not work in a vacuum, so we will start with a broad view of the full privilege system, before diving into the specifics of denying access to resources.


Vicentiu Ciorbaru

Vicentiu Ciorbaru (MariaDB Foundation)

Software Engineer


Vicentiu works at the MariaDB Foundation as a Software Engineer. He focuses on Optimizer development, but has also worked on other parts of the MariaDB Server.

Notable projects include:
Window Functions in MariaDB
Custom Aggregate Functions in MariaDB
Roles in MariaDB


  Download Slides  

Connect with Percona

Stay Connected on:

Percona Live Conferences

The Percona Live Open Source Database Conferences are the premier event for the diverse and active open source database community, as well as businesses that develop and use open source database software.

Contact Us

For general information about the event/expo/conference, including registration, please contact us at:

  • info(@)
  • +1-888-401-3401
  • +1-919-948-2863