Print

[PsychoGTI]

What permissions in MySQL should the Coppermine user account have? Right now, I've done the following permissions directly into the 'mysql' database:

grant select,insert,update,delete,create,drop
    -> on coppermine.*
    -> to 'user'@'localhost'
    -> identified by 'password';

Is there any I'm missing, or that I have too much of? The site seems to work now...  just want to be as tight as possible but still function.

Thanks in advance!
P.

[Nibbler]

You need alter and index for updates. Create and drop are only needed during installation, major updates or installing certain plugins so you could leave those out if you want.

http://coppermine-gallery.net/demo/cpg14x/docs/index.htm#what

If you want to tighten further then apply table specific permissions.

[PsychoGTI]

Excellent!  Thanks! I've made the changes, and everything looks good.  :-)

Cheers,
P.