[opencms-dev] Permissions for "OpenCms Connection" during setup

[Alberto Gallardo]

The current Setup Wizard (based on branch_9_0_x) requires filling in two
connections: "Setup Connection" and "OpenCms Connection." For this last
one, there is a hint:

The OpenCms Connection is used when running Alkacon OpenCms after the
installation.

For security reasons, the specified user should not have database
administration permissions. This user information is stored in the
opencms.properties
file after the setup.

I could find in the docs (install.html packaged in the war distribution) a
"Security issues" section, recommending to execute some mysql commands
after installation:

   use mysql;
   insert into user values ('localhost', 'opencmsuser', password('XXXXX'),\
      'N','N','N','N','N','N','N','N','N','N','N','N','N','N');
    insert into db values ('localhost', 'opencms', 'opencmsuser',\
      'Y','Y','Y','Y','Y','Y','Y','Y','Y','Y');
   flush privileges;

but does any one know what is the smallest set of permissions for the "
OpenCms Connection" required during installation?

And by the way, does any one know if this "opencmsuser" is the same as the "
OpenCms Connection" one?


Regards

Alberto Gallardo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20140930/d9f27fab/attachment.htm>