[Tickets #683] NEW: open access to database for account horde
bugs at bugs.horde.org
bugs at bugs.horde.org
Sun Oct 10 17:06:00 PDT 2004
DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.
Ticket URL: http://bugs.horde.org/ticket/?id=683
-----------------------------------------------------------------------
Ticket | 683
Created By | s.gourdie at math.canterbury.ac.nz
Summary | open access to database for account horde
Queue | Turba
Version | 1.2.2
State | Unconfirmed
Priority | 1. Low
Type | Bug
Owners |
-----------------------------------------------------------------------
s.gourdie at math.canterbury.ac.nz (2004-10-10 17:06) wrote:
Hi,
within file mysql_create.sql ( scritps/drivers/ )
this last line is
GRANT SELECT, INSERT, UPDATE, DELETE ON turba_objects TO horde;
This creates a new account `horde`@`%` which has no password
and can be accessed from any machine.
I suspect all that is necessary is
GRANT SELECT, INSERT, UPDATE, DELETE ON turba_objects TO horde at locahost
Which grants privilege to the turba_objects table to the existing
account horde at localhost which is password protected, and locks the
access down to the local machine on which horde ( and turba ) is running.
Regards
Steve Gourdie
More information about the bugs
mailing list