On Thu, 2005-12-29 at 16:58, Roger B.A. Klorese wrote:
> Jamie Cameron wrote:
> > On Thu, 2005-12-29 at 05:08, Roger B.A. Klorese wrote:
> >
> >> Is it possible to allow users to perform scheduled database backups --
> >> not just on-demand? It seems to me I can schedule them as administrator
> >> but not as an ordinary user -- have I missed a switch?
> >>
> >
> > At the moment, it is not possible for ordinary users to setup MySQL
> > backups. The reason is that this all scheduled backups are done as root,
> > and allowing any user to setup his own would let potentially un-trusted
> > users write to any file on the system with root privileges .. which
> > would be a serious security hole.
> >
>
>
> Fair enough... but it seems that you could restrict the output
> directories the same way you do for the directories for upload/download
> and file browsing.
Actually, I just realized that this is already possible. On the module's
access control page, you can set a directory that backups are limited
to. The only catch is that the user to write backups as must be set to
'root' , to reflect the fact that scheduled backups are always done as
root.
- Jamie
|
