title: Security Bypass MS Excel Power Query connected to MySQL
body: <p><strong>SETUP:</strong></p>
  
  <p>MySQL DB in google cloud 5.6.3</p>
  
  <p>Microsoft Excel 2013</p>
  
  <p>Power Query Plug in.</p>
  
  <p>MySQL user ODBC</p>
  
  <p>Privileges = GRANT SELECT on SchemaName.TableName TO ODBC@'%'</p>
  
  <p>ODBC connection made to the MySQL server by using Power Query > From Other Sources > From ODBC > Select Cloud MySQL server from DSN list.</p>
  
  <p><strong>Problem:</strong></p>
  
  <p>In the next screen "Table Navigator".  The window not only lists all tables in the Schema, but also allows me to load each and every table successfully. </p>
  
  <p>Connecting through the exact same steps but instead using the standard excel data menu option > from other source I am restricted to only the TableName as expected.</p>
  
  <p>Trying to connect to any other table with windows, ODBC manager, also yields a denied connection as expected.</p>
  
  <p><strong>Question:</strong></p>
  
  <p>Is this some kind of security bypassing bug that is allowing this Power Query plugin to some how bypass my MySQL user Grant privileges statement?</p>
  
  <p>Is my expectation of User Grant as a "Security" mechanism falsely placed.</p>
  
  <p>Or am I just doing something wrong, and need to do privileges a different way in MySQL to have it actually secure???</p>