Re: [I] Security: ACS user access to all databases [cloudstack]

["weizhouapache (via GitHub)" <gi...@apache.org>]

weizhouapache commented on issue #8240:
URL: https://github.com/apache/cloudstack/issues/8240#issuecomment-1835683714

   To be clear, 
   - The script `cloudstack-setup-databases` use `root` user to create cloudstack database
   - ACS uses `cloud` user to access and modify the databases `cloud` and `cloud_usage`
   
   I do not think the privileges of `cloud` user is a problem.
   
   The `root` user should have higher privileges, for example, create databases, create procedures in `mysql` database. However, the script needs to be executed only once during the whole ACS setup (you do not need to execute it on extra management servers and database servers).
   
   Do you mean the privileges of `root` user is a security issue ?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org