PDA

View Full Version : Limiting vbulletin database grants?


kjkoster
04-18-2009, 05:56 PM
Dear All,

I currently run with a vbulletin database user that simply has all rights on all tables in the vbulletin schema. That is nice and predictable, but I would feel more comfortable if that user would have some restrictions.

Has any work been done to determine which grants are actually needed and which are not?

Angel-Wings
04-19-2009, 02:18 PM
I've just removed the GRANT rights which shouldn't be there anyways. The most of the other operations are required, like ALTER specially when installing / uninstalling Addons or Updates.

Paul M
04-19-2009, 03:56 PM
Yep, GRANT is about the only one you should remove.

kermit2
04-22-2009, 10:30 PM
... and create user, reload, shutdown, process, file, create_user, replication, super. I'm not aware of any of those being needed

Carnage
04-29-2009, 04:25 PM
They shouldn't be on user accounts anyway; only admin accounts should have those privs.