Question

I have a shared web server setup among friends. Each website has its own database. I’d like to be able to delegate user management for each of those databases to the owner of the database. That way they can create accounts for their web applications to access their specific tables yet not wander around if the specific application is compromised.

To further clarify by way of example, I’d like something like this:

Database server at : db.hosting.coop
db root user : [e-mail] <full permissions as root>

website and database 1: foo.com
foo.com db user : [e-mail] <full permissions on database foo, with ability to grant user access to database foo, granted by [e-mail]>
foo.coms rails app db user : foorails@localhost <select,insert,update,delete on foo.*, granted by [e-mail]>

website and database 2: bar.com
bar.com db user : bar@% <full permissions on database foo, with grant, granted by [e-mail]>
bar.coms php app db user : bar_website@localhost <select,insert,update,delete on bar.*, granted by [e-mail]>

Answer 1

As root:

GRANT CREATE USER ON *.* TO 'foo'@'%';
GRANT ALL PRIVILEGES ON `foo.com`.* TO 'foo'@'%' WITH GRANT OPTION;

As foo:

CREATE USER 'foorails'@'%' IDENTIFIED BY 'secret';
GRANT SELECT ON `foo.com`.* TO 'foorails'@'%'

likewise with others