In MySQL 5.0, enabling the read_only system variable does not prevent use of SET PASSWORD. If a FOR user ...
dev.mysql.com