View Issue Details

IDProjectCategoryView StatusLast Update
0013137mantisbtdb mysqlpublic2013-06-09 20:54
Reporterdregad Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Product Version1.2.5 
Summary0013137: DB user with minimal rights as per install checks, cannot install plugins
Description

When installing Mantis, the script checks that the database user defined in config_inc.php ($g_db_username) has enough privileges.

In 1.2.x, this requires the user to have SELECT, INSERT, UPDATE, DELETE on the mantis schema.

However, this is not sufficient when installing plugins that need to alter the schema itself; in that case, APPLICATION ERROR #2503 is displayed: "Upgrading the plugin schema failed in block #0"

I believe that the check should also ensure that the DB user also has CREATE, ALTER, INDEX, DROP.

Alternatively, the plugin installation should request to enter another set of credentials to create the schema, similar to what install.php does.

Steps To Reproduce
  • Create a DB new user with only SELECT, INSERT, UPDATE, DELETE on the mantis schema.
  • Setup config_inc.php to use that account
  • Install a plugin that requires new tables (e.g. FAQ, Timecard...)
Additional Information

This is only an issue when, like in my company, it is required that the application service accounts and database schemas, are granted the minimum rights needed for regular operations (so using root or equivalent account in config_inc.php is not an option).

TagsNo tags attached.

Relationships

related to 0010308 confirmed Need ability to specify MySQL administrator username/password to install plugins 

Activities

There are no notes attached to this issue.