connect  con1,localhost,foo,,db1;

show grants;

Grants for foo@localhost

GRANT USAGE ON *.* TO `foo`@`localhost`

GRANT CREATE ON `db1`.* TO `foo`@`localhost`

GRANT CREATE ON `db2`.* TO `foo`@`localhost`

create table t(t int);

show columns in t;

ERROR 42000: SELECT command denied to user 'foo'@'localhost' for table 't'