Does anyone have any recommendations on what authority to grant to the database User utilized by vBulletin? Seems that for security reasons, you would want to grant full authority.

Thanks for your help!

You only want to give your tech admin access to running a DP query..
The whole forum can be deleted by one command..

--------------------

Post your URL and a link to your vb.com username here to get full access.

Add our Facebook Blog, Group and LinkedIn group.. Thanks

Stay up to date by installing our Tool Bar

I didn't understand your response (surely, my layman's knowledge). Let me clarify:

I'm referring to the MySQL user profile tied to vBulletin as defined in config.php. What schema privileges are required for smooth operation of vBulletin?

I've removed the obvious stuff like GRANT,CREATE,DROP, etc. Obviously, I need to leave the basics like INSERT & UPDATE. Beyond this, what other privileges are required?

I'd like to clamp it down, but I don't want to cripple any features.

Thanks again.

Rob

I would say these:

SELECT
CREATE
INSERT
ALTER
UPDATE
DROP
DELETE
LOCK TABLES
INDEX
REFERENCES
CREATE
TEMPORARY TABLES

--------------------

So to confirm, you would remove:

GRANT
EXECUTE
CREATE_VIEW
SHOW_VIEW
ALTER_ROUTINE
CREATE_ROUTINE

I'm surprised to see DROP. Won't that let a villian completely whipe out a database or table. Forgive my naivity, I'm certainly a DBA wanna-be.

Thanks,

Rob

Well to be able to drop their own tables.

--------------------