0013137: DB user with minimal rights as per install checks, cannot install plugins - MantisBT

ID	Project	Category	View Status	Date Submitted	Last Update
0013137	mantisbt	db mysql	public	2011-07-12 10:26	2013-06-09 20:54

Reporter	dregad	Assigned To
Priority	normal	Severity	minor	Reproducibility	always
Status	new	Resolution	open
Product Version	1.2.5

Summary	0013137: DB user with minimal rights as per install checks, cannot install plugins
Description	When installing Mantis, the script checks that the database user defined in config_inc.php ($g_db_username) has enough privileges. In 1.2.x, this requires the user to have SELECT, INSERT, UPDATE, DELETE on the mantis schema. However, this is not sufficient when installing plugins that need to alter the schema itself; in that case, APPLICATION ERROR #2503 is displayed: "Upgrading the plugin schema failed in block #0" I believe that the check should also ensure that the DB user also has CREATE, ALTER, INDEX, DROP. Alternatively, the plugin installation should request to enter another set of credentials to create the schema, similar to what install.php does.
Steps To Reproduce	Create a DB new user with only SELECT, INSERT, UPDATE, DELETE on the mantis schema. Setup config_inc.php to use that account Install a plugin that requires new tables (e.g. FAQ, Timecard...)
Additional Information	This is only an issue when, like in my company, it is required that the application service accounts and database schemas, are granted the minimum rights needed for regular operations (so using root or equivalent account in config_inc.php is not an option).
Tags	No tags attached.