Task #72199
closed
Review/update list of MySQL commands required
0%
Description
Review and possibly update list of SQL commands required for the MySQL user.
The current requirements are documented [1] as follows:
The MySQL user needs a least the following privileges on the TYPO3 database: * SELECT, INSERT, UPDATE, DELETE * CREATE, DROP, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES It is recommended to also grant the following privileges: * CREATE VIEW, SHOW VIEW * EXECUTE, CREATE ROUTINE, ALTER ROUTINE
Inspired by a discussion on the English TYPO3 mailing list [2] I decided to submit this ticket in order to review and clarify the MySQL requirements listed above and possibly update the list as required.
[1] https://git.typo3.org/Packages/TYPO3.CMS.git/blob_plain/refs/tags/7.6.0:/INSTALL.md
[2] http://lists.typo3.org/pipermail/typo3-english/2015-December/094623.html
Updated by Morton Jonuschat over 8 years ago
- Tracker changed from Bug to Task
- Status changed from New to Needs Feedback
Actually the quoted list are Privileges that are required, not actual SQL commands. What's the list of commands supposed to accomplish?
Updated by Michael Schams over 8 years ago
Please correct me, if I am wrong.
My understanding is that this list shows which minimum privileges the MySQL user must have.
MySQL provides a set of privileges:
https://dev.mysql.com/doc/refman/5.5/en/privileges-provided.html
The terminology "SQL commands" I used is not 100% accurate. I meant privileges (which are in fact privileges to execute certain commands).
For example: (quote) "The LOCK TABLES privilege enables the use of explicit LOCK TABLES statements to lock tables for which you have the SELECT privilege. This includes the use of write locks, which prevents other sessions from reading the locked table."
If TYPO3 CMS does not require the LOCK TABLES privilege necessarily, system administrators could/should revoke this privileges.
So, this list can be used to determine which privileges are required for TYPO3 CMS to operate.
Updated by Alexander Opitz almost 8 years ago
- Status changed from Needs Feedback to New
Updated by Susanne Moog about 5 years ago
- Status changed from New to Needs Feedback
@Michael from a quick look I'd say the list is still accurate (though the LOCK TABLES is mostly used by mysqldump not TYPO3 itself). - Depending on extensions there might be others of course. Do you remember what triggered opening the ticket?
Updated by Michael Schams about 4 years ago
Can we close this ticket please?
It's over 4 years ago (last update almost a year ago).
Updated by Björn Jacob about 4 years ago
- Status changed from Needs Feedback to Closed
Thank you for your feedback. I am closing this issue as requested by the author.