Is it possible to not grant all mysql permissions?

[nicholasdipiazz]

When configuring Alfresco 3 or 4 with MySQL as the database backend, the documentation all states you do this to create the database and alfresco user:

mysql> CREATE DATABASE alfresco;
mysql> CREATE USER 'alfresco'@'localhost' IDENTIFIED BY '<password>';
mysql> GRANT ALL PRIVILEGES ON alfresco.* TO 'alfresco'@'localhost';

But To comply with the principal of least permission, we are wondering… is there really a need for ALL priviledges for the alfresco user? What ones could we eliminate safely, if any?

-Nicholas

[mitpatoliya]

Yes, you require to have all the previlages for alfresco user on the DB.
As by default whenever alfresco do some changes in the db it will do this with this user.
If you changes the permission you will get the error when you change something from front end.
As it will also go and try to update the db accordingly.