Why should you be selective when granting the PROCESS privilege to an account?

Question

Options

• AIt allows a client to process scripts.
• BIt allows the use of stored routines.
• CIt allows a client to see another user's queries with the SHOW PROCESSLIST command.
• DIt allows a client to control running processes on a server.

• B
  4% (1)
• D
  96% (24)

Explanation

Granting the PROCESS privilege is a security risk because it allows the account to execute SHOW PROCESSLIST and see all currently running queries across every user session on the server - including queries that may expose sensitive data, credentials, or business logic. Option A is wrong because script processing is not a privilege concept in SQL access control. Option B is wrong because stored routine execution is governed by the EXECUTE privilege, not PROCESS. Option C is partially true (SHOW PROCESSLIST is indeed involved), but it describes only a side effect - the core security concern is the broader ability to monitor and interact with server processes, including killing other users' queries with KILL, making D the complete and correct answer.

Memory tip: Think of PROCESS like giving someone a window into the server's "task manager" - they can watch what everyone else is doing and terminate tasks, which is why it should be reserved for trusted administrators only.

No community discussion yet for this question.