dot-files/mysql/acl_restrictions.sql

SHOW GRANTS FOR 'role';
REVOKE ALL ON *.* FROM 'role'@'%';
GRANT ALL ON ex_database.* TO 'role'@'%' WITH GRANT OPTION;