1

General rule for root MySQL user is from infosec point of view:

"Do not use root for any web application for MySQL connection, Select, Update, or Delete queries. Instead of create and use another MySQL user with minimal right."

Ok. What are minimal rights needed for such user, and how can I do it MySQL ? I haven't found any guideline / article about this.

Thank you for your help.

closed as off-topic by Tobi Nary, schroeder Apr 13 '16 at 14:56

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    VTC'd for migration to serverfault.SE – Tobi Nary Apr 13 '16 at 14:09
  • Sorry, i will post these. – Tass Mark Apr 13 '16 at 14:23
  • 1
    @TassMark IMO, posts that reference external facts, like general rules, seem to do better with reference links – Neil Smithline Apr 13 '16 at 16:04
  • My Billy Mays ad pitch: Ask yourself. Does my web app need to be able to drop my entire database or other databases root has access to? Does it need to access all tables in the database? Do I want my end user to be able to do these things? If you answered no to any of these then root is not for you! Now introducing orange scented user permissions! – Bacon Brad Apr 13 '16 at 18:45

Browse other questions tagged or ask your own question.