[Tickets #683] NEW: open access to database for account horde

bugs at bugs.horde.org bugs at bugs.horde.org
Sun Oct 10 17:06:00 PDT 2004


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=683
-----------------------------------------------------------------------
 Ticket     | 683
 Created By | s.gourdie at math.canterbury.ac.nz
 Summary    | open access to database for account horde
 Queue      | Turba
 Version    | 1.2.2
 State      | Unconfirmed
 Priority   | 1. Low
 Type       | Bug
 Owners     | 
-----------------------------------------------------------------------


s.gourdie at math.canterbury.ac.nz (2004-10-10 17:06) wrote:

Hi,

within file mysql_create.sql ( scritps/drivers/ )
this last line is 

GRANT SELECT, INSERT, UPDATE, DELETE ON turba_objects TO horde;

This creates a new account `horde`@`%` which has no password
and can be accessed from any machine.

I suspect all that is necessary is 

GRANT SELECT, INSERT, UPDATE, DELETE ON turba_objects TO horde at locahost

Which grants privilege to the turba_objects table to the existing
account horde at localhost which is password protected, and locks the
access down to the local machine on which horde ( and turba ) is running.

Regards

Steve Gourdie





More information about the bugs mailing list