Global Permissions:
Cho phép tại bất kỳ host nào:
GRANT ALL PRIVILEGES ON *.* to root IDENTIFIED BY '123abc' WITH GRANT OPTION;
hoặc
GRANT ALL PRIVILEGES ON *.* to root@'%' IDENTIFIED BY '123abc' WITH GRANT OPTION;

chỉ cho phép connect từ localhost
GRANT ALL PRIVILEGES ON *.* to root@localhost IDENTIFIED BY '123abc' WITH GRANT OPTION;

//trong đó 123abc là passwd.

Khi chỉ cho phép trên 1 DB cố định:
GRANT ALL PRIVILEGES ON joedb.* to joe IDENTIFIED BY 'abcde' WITH GRANT OPTION;





mysql> select Host, User, Password, Grant_priv from user;

+---------------+---------+------------------+------------+
| Host | User | Password | Grant_priv |
+---------------+---------+------------------+------------+
| localhost | root | 123456789abcdefg | Y |
| % | joe | abcdefg123456789 | N |
| % | joe2 | abcdefg456712345 | N |
+---------------+---------+------------------+------------+


mysql> select Host, Db, User, Grant_priv from db;

+-----------+------------------+---------+------------+
| Host | Db | User | Grant_priv |
+-----------+------------------+---------+------------+
| % | test | | N |
| % | test\_% | | N |
| % | joedb | joe | Y |
| % | mydb2 | joe2 | Y |
+-----------+------------------+---------+------------+

cho phép ng dùng joe -> có quyền trên joedb khi remote

__________________
http://hackingart.com/tinh_yeu_va_gi...c_girl_9x.html