Minimum DB User Privileges to run app #383

Closed
opened 2026-02-04 19:15:44 +03:00 by OVERLORD · 4 comments
Owner

Originally created by @slimninja on GitHub (Jul 25, 2017).

A question for you, potentially an update for your documentation as well. What are the minimum privileges granted to the main app DB user to use the application?

image

Originally created by @slimninja on GitHub (Jul 25, 2017). A question for you, potentially an update for your documentation as well. What are the minimum privileges granted to the main app DB user to use the application? ![image](https://user-images.githubusercontent.com/12036621/28584057-4b91d758-7139-11e7-80e7-2315f436b081.png)
OVERLORD added the 📖 Docs Update label 2026-02-04 19:15:44 +03:00
Author
Owner

@Shackelford-Arden commented on GitHub (Jul 25, 2017):

@salimnanji Not sure if this is what you're looking for, but looking at the Ubuntu 16.04 script linked in the installation instructions, here is what I see for permissions granted to the user.

image

Hope that helps!

@Shackelford-Arden commented on GitHub (Jul 25, 2017): @salimnanji Not sure if this is what you're looking for, but looking at the Ubuntu 16.04 script linked in the installation instructions, here is what I see for permissions granted to the user. ![image](https://user-images.githubusercontent.com/7362263/28585316-8d4d4b4a-7135-11e7-8658-518aabe9bb67.png) Hope that helps!
Author
Owner

@slimninja commented on GitHub (Jul 25, 2017):

Ah I see, so it looks like it is granting all privileges, similar to how I have my user set up.

@slimninja commented on GitHub (Jul 25, 2017): Ah I see, so it looks like it is granting all privileges, similar to how I have my user set up.
Author
Owner

@ssddanbrown commented on GitHub (Jul 27, 2017):

Since database migrations are done as part of the app I'd advise the user should have pretty much all permissions. Some are likely not needed, Such as 'views' or 'routines' but I cannot guarantee that for the future.

If you really wanted to limit access you could do that by using a different .env options when migrating which would limit the required permissions for general daily use.

@ssddanbrown commented on GitHub (Jul 27, 2017): Since database migrations are done as part of the app I'd advise the user should have pretty much all permissions. Some are likely not needed, Such as 'views' or 'routines' but I cannot guarantee that for the future. If you really wanted to limit access you could do that by using a different .env options when migrating which would limit the required permissions for general daily use.
Author
Owner

@slimninja commented on GitHub (Jul 28, 2017):

Thanks for the explanation! Good to know.

@slimninja commented on GitHub (Jul 28, 2017): Thanks for the explanation! Good to know.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#383