Mailing List Archive

Mysql privileges
Which mysql privileges should wikiuser have?

How about sysops?

Developers?
Re: Mysql privileges [ In reply to ]
> (Fred Bauder <fredbaud@ctelco.net>):
> Which mysql privileges should wikiuser have?
>
> How about sysops?
>
> Developers?

The maintenance directory has a script "buildusers.sql" that
grants all the needed privileges to users "wikiuser", "wikiadmin",
and "wikisql". Developer status is a function of the software and
isn't manifested as a different MySQL user.

Bascially, wikiuser can do anything but create and change the database,
and most of the normal wiki functions happen as that user. Wikisql is
a restricted user that can only select; it is used for the direct SQL
query function of Sysops to limit potential damage. Wikiadmin is not
used by the software at all, but is used by the build scripts and such.
It is meant for those with real access to the server.

--
Lee Daniel Crocker <lee@piclab.com> <http://www.piclab.com/lee/>
"All inventions or works of authorship original to me, herein and past,
are placed irrevocably in the public domain, and may be used or modified
for any purpose, without permission, attribution, or notification."--LDC
Re: Mysql privileges [ In reply to ]
On Mon, 2003-03-10 at 19:39, Fred Bauder wrote:
> Which mysql privileges should wikiuser have?

See buildusers.sql in the maintenance subdirectory.

> How about sysops?

SQL query access for sysops goes through the 'wikisql' user. Should be
in buildusers.sql as well... Basically, read-only access to all tables
except for the password and e-mail fields in the user table.

> Developers?

SQL query access for developers goes through wikiuser, same as the wiki
interface.

Note that the user 'wikiadmin' is used only by the maintenance scripts
(createdb.php, rebuildLinks.php etc) and, optionally, manual
maintenance.

-- brion vibber (brion @ pobox.com)
Re: Mysql privileges [ In reply to ]
Hey, Fred, I hope you'll keep some notes, however sketchy, on
how you're getting all this done, and then if those notes were on
the meta.wikipedia.com, other people could add/edit them over time,
to help other people install the software.

Fred Bauder wrote:

> Which mysql privileges should wikiuser have?
>
> How about sysops?
>
> Developers?
>
> _______________________________________________
> Wikitech-l mailing list
> Wikitech-l@wikipedia.org
> http://www.wikipedia.org/mailman/listinfo/wikitech-l
Re: Mysql privileges [ In reply to ]
Well, if you can handle the embarassment, you're the perfect guy for
this. :-) There's a lot of stuff that developers forget that other
people don't have as background knowledge. Coming in "fresh" you have
an important perspective.

Fred Bauder wrote:

> Well, my experience is interesting. I am using space from a web-hosting
> service, cheap but with minimal support (this can get nasty when you don't
> have root access to the server; you have to not only figure out what to do
> but beg someone else to do it). I did invest in some books which have been
> illuminating.
>
> PHP & MySQL for Dummies and Build Your Own Database Driven Website Using PHP
> & MySQL.
>
> I'll try to get something onto meta (I don't know how much embarrassment I
> can stand though).
>
> Fred
>
> > From: Jimmy Wales <jwales@bomis.com>
> > Reply-To: wikitech-l@wikipedia.org
> > Date: Tue, 11 Mar 2003 05:37:36 -0800
> > To: wikitech-l@wikipedia.org
> > Subject: Re: [Wikitech-l] Mysql privileges
> >
> > Hey, Fred, I hope you'll keep some notes, however sketchy, on
> > how you're getting all this done, and then if those notes were on
> > the meta.wikipedia.com, other people could add/edit them over time,
> > to help other people install the software.
> >
> > Fred Bauder wrote:
> >
> >> Which mysql privileges should wikiuser have?
> >>
> >> How about sysops?
> >>
> >> Developers?
> >>
> >> _______________________________________________
> >> Wikitech-l mailing list
> >> Wikitech-l@wikipedia.org
> >> http://www.wikipedia.org/mailman/listinfo/wikitech-l
> > _______________________________________________
> > Wikitech-l mailing list
> > Wikitech-l@wikipedia.org
> > http://www.wikipedia.org/mailman/listinfo/wikitech-l
>
> _______________________________________________
> Wikitech-l mailing list
> Wikitech-l@wikipedia.org
> http://www.wikipedia.org/mailman/listinfo/wikitech-l
Re: Mysql privileges [ In reply to ]
Well, my experience is interesting. I am using space from a web-hosting
service, cheap but with minimal support (this can get nasty when you don't
have root access to the server; you have to not only figure out what to do
but beg someone else to do it). I did invest in some books which have been
illuminating.

PHP & MySQL for Dummies and Build Your Own Database Driven Website Using PHP
& MySQL.

I'll try to get something onto meta (I don't know how much embarrassment I
can stand though).

Fred

> From: Jimmy Wales <jwales@bomis.com>
> Reply-To: wikitech-l@wikipedia.org
> Date: Tue, 11 Mar 2003 05:37:36 -0800
> To: wikitech-l@wikipedia.org
> Subject: Re: [Wikitech-l] Mysql privileges
>
> Hey, Fred, I hope you'll keep some notes, however sketchy, on
> how you're getting all this done, and then if those notes were on
> the meta.wikipedia.com, other people could add/edit them over time,
> to help other people install the software.
>
> Fred Bauder wrote:
>
>> Which mysql privileges should wikiuser have?
>>
>> How about sysops?
>>
>> Developers?
>>
>> _______________________________________________
>> Wikitech-l mailing list
>> Wikitech-l@wikipedia.org
>> http://www.wikipedia.org/mailman/listinfo/wikitech-l
> _______________________________________________
> Wikitech-l mailing list
> Wikitech-l@wikipedia.org
> http://www.wikipedia.org/mailman/listinfo/wikitech-l
Re: Mysql privileges [ In reply to ]
>
>
>Fred Bauder wrote:
>
>>Well, my experience is interesting. I am using space from a web-hosting
>>service, cheap but with minimal support (this can get nasty when you don't
>>have root access to the server; you have to not only figure out what to do
>>but beg someone else to do it). I did invest in some books which have been
>>illuminating.
>>
The most frustrating message you can get when you're trying to solve a
problem on a stand-alone home computer is "See system administrator." :-)

Ec