[ postfixadmin-Bugs-1938119 ] Database rights in DATABASE-MYSQL.txt

[SourceForge.net <no...@so...>]

Bugs item #1938119, was opened at 2008-04-08 22:41
Message generated for change (Comment added) made by christian_boltz
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=937964&aid=1938119&group_id=191583

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Database
Group: SVN (please specify revision!)
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Database rights in DATABASE-MYSQL.txt

Initial Comment:
Hello

I'm testing the rc3 release of PostfixAdmin. I'm not sure, but I think there is an error in the database rights.

The user postfix and postfixadmin have the same rights on the database, but I think, postfix needs only select rights, because this user is normally only used to get information from the database. 

The user postfixadmin is used to managed the database, therefore it needs the update, delete and insert rights.

Am I wrong?

Best regards

M. Kreis 

----------------------------------------------------------------------

>Comment By: Christian Boltz (christian_boltz)
Date: 2008-04-12 00:59

Message:
Logged In: YES 
user_id=593261
Originator: NO

You are right - postfix doesn't need write access to the database.

There is now (SVN r329) a DOCUMENTS/SECURITY.TXT which describes the
needed permissions for the database users. (BTW: DATABASE_*.TXT no longer
exist, database creation is now done using setup.php / upgrade.php.)

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=937964&aid=1938119&group_id=191583