We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 3677
    • 130 Posts
    I checked the ModX docs and the wiki and only found a reference in the wiki to enabling all user permissions to be safe.

    I’m trying to be security conscious and I’m wondering does Modx really need ALL of the MySQL user permissions to be turned on? "Create User" shouldn’t be necessary. Does anyone have a definitive list of those required?

    Thanks,
    -Brian
      • 4310
      • 2,310 Posts
      I’ve worked on sites where Import and Create are not available without any issues.
        • 3677
        • 130 Posts
        Let’s try this...I’ll list out the ones I have enabled now with my site working fine and you all can reply if you are confident something else can be dropped. Bunk58, I’ve got MySQL 5.0 installed, and I don’t see an "Import" privilege.

        SELECT - Allows reading data
        INSERT - Allows inserting and replacing data
        UPDATE - Allows changing data
        DELETE - Allows deleting data

        CREATE - Allows creating new databases and tables
        ALTER- Allows altering the structure of existing tables
        INDEX - Allows creating and dropping indexes
        DROP - Allows dropping database and tables (Not Required per bunk58)
        CREATE TEMPORARY TABLES - Allows creating temporary tables
        CREATE ROUTINE - Allows creating stored routines

        REFERENCES - Has no effect in this MySQL version
        LOCK TABLES - Allows locking tables for the current thread
          • 22303 MODX Staff
          • 10,725 Posts
          SELECT, INSERT, UPDATE, DELETE are required for normal operation.
          CREATE, ALTER, INDEX, DROP1 are required for installation/upgrades and potentially for various add-ons.
          CREATE DATABASE will allow new installs to create the database for you with the proper charset/collation.

          1 DROP may not actually be required for upgrades, but it potentially could be used.
            • 28042 ☆ A M B ☆
            • 24,524 Posts
            There is at least one snippet (or module? I forget now exactly) that requires the "create temporary table" permission as well.
              Studying MODX in the desert - http://sottwell.com
              Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
              Join the Slack Community - http://modx.org