security and 'grant all' sentence in alfresco DB

[ramiro]

Hi there,

In extras/mysql folder there is an script to create an empty alfresco Db schema in mysql.
In that sql scripts there is a "grant all" sentence.
Not sure it is a good practice from the point of view of security unless it is strictly neccessary.
Is it possible to reduce DB privileges to  SELECT, INSERT, UPDATE and DELETE?
For the first starting I understand this is needed as long as alfresco will create all tables and DB objects in the schema but once this is done: do we still need the grant all sentence or can we just set SELECT, INSERT, UPDATE and DELETE?

Thanks in advance

[mrogers]

Yes you should be able to reduce the privileges once the DB has initialised.   Just remember to re-enable them when upgrading to a new version.

[ramiro]

The question is:

Is this set enough: SELECT, INSERT, UPDATE and DELETE ?
yes/not
if the answer is not: Do you know the minimum set of privileges needed?

thanks