topic security and 'grant all' sentence in alfresco DB in Alfresco Archive

security and 'grant all' sentence in alfresco DB

ramiro — Thu, 17 Dec 2009 16:30:17 GMT

Hi there,In extras/mysql folder there is an script to create an empty alfresco Db schema in mysql.In that sql scripts there is a "grant all" sentence.Not sure it is a good practice from the point of view of security unless it is strictly neccessary.Is it possible to reduce DB privileges to SELECT,

Re: security and 'grant all' sentence in alfresco DB

mrogers — Fri, 18 Dec 2009 00:28:17 GMT

Yes you should be able to reduce the privileges once the DB has initialised. Just remember to re-enable them when upgrading to a new version.

Re: security and 'grant all' sentence in alfresco DB

ramiro — Fri, 18 Dec 2009 14:16:33 GMT

The question is:

Is this set enough: SELECT, INSERT, UPDATE and DELETE ?
yes/not
if the answer is not: Do you know the minimum set of privileges needed?

thanks