[kronolith] Fwd: Re: [cvs] cvs commit: nag prefs.php

Mike Hardy mhardy@h3c.com
Sat, 26 Jan 2002 22:01:17 -0800 (PST)


---------------------- multipart/mixed attachment

On Sun, 27 Jan 2002, Ilya wrote:

> shoot. u are right together with Chuck, that was the case. horde user didn't
> have permission to create tables...
> Thank you

No problem - glad its working

> last time I configured horde (ver1,2 and old imp) it didnt need to create
> any new tables, all was done during setup, so i didnt expect that new tables
> will be created on the fly.

It almost seems like a security flaw, doesn't it? That's the way PEAR
works though, and that's the reason the new versions do it - they use the
PEAR abstraction layer now.

It might be a good idea to put all of the sequence tables in
there for MySQL so its possible to remove an otherwise unnecessary
capability from the database user, but that would mean maintaining
separate SQL init scripts for every database, and that's *exactly* the
sort of thing PEAR is trying to save everyone from.

That only leaves the docs needing updating so the extra privilege is noted
- I attached a patch that tries to address that

-Mike


---------------------- multipart/mixed attachment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---------------------- multipart/mixed attachment--