Limiting vbulletin database grants?
 

Dear All,

I currently run with a vbulletin database user that simply has all rights on all tables in the vbulletin schema. That is nice and predictable, but I would feel more comfortable if that user would have some restrictions.

Has any work been done to determine which grants are actually needed and which are not?

I've just removed the GRANT rights which shouldn't be there anyways. The most of the other operations are required, like ALTER specially when installing / uninstalling Addons or Updates.

Yep, GRANT is about the only one you should remove.

... and create user, reload, shutdown, process, file, create_user, replication, super. I'm not aware of any of those being needed

They shouldn't be on user accounts anyway; only admin accounts should have those privs.