I checked the ModX docs and the wiki and only found a reference in the wiki to enabling all user permissions to be safe.
I’m trying to be security conscious and I’m wondering does Modx really need ALL of the MySQL user permissions to be turned on? "Create User" shouldn’t be necessary. Does anyone have a definitive list of those required?
Thanks,
-Brian
I’ve worked on sites where Import and Create are not available without any issues.
Let’s try this...I’ll list out the ones I have enabled now with my site working fine and you all can reply if you are confident something else can be dropped. Bunk58, I’ve got MySQL 5.0 installed, and I don’t see an "Import" privilege.
SELECT - Allows reading data
INSERT - Allows inserting and replacing data
UPDATE - Allows changing data
DELETE - Allows deleting data
CREATE - Allows creating new databases and tables
ALTER- Allows altering the structure of existing tables
INDEX - Allows creating and dropping indexes
DROP - Allows dropping database and tables (Not Required per bunk58)
CREATE TEMPORARY TABLES - Allows creating temporary tables
CREATE ROUTINE - Allows creating stored routines
REFERENCES - Has no effect in this MySQL version
LOCK TABLES - Allows locking tables for the current thread
-
MODX Staff
- 10,725 Posts
SELECT, INSERT, UPDATE, DELETE are required for normal operation.
CREATE, ALTER, INDEX, DROP1 are required for installation/upgrades and potentially for various add-ons.
CREATE DATABASE will allow new installs to create the database for you with the proper charset/collation.
1 DROP may not actually be required for upgrades, but it potentially could be used.
-
☆ A M B ☆
- 24,524 Posts
There is at least one snippet (or module? I forget now exactly) that requires the "create temporary table" permission as well.