PEREGRINE I.T. Pty Ltd Signature

I am enquiring as to the *minimum* privileges required by the RoundCube user to access the backend SQL (MariaDB) Server.

Yes, I am aware that the Wiki says (on the Installation page) to use `GRANT ALL PRIVILEGES`, as do all of the On-Line Tutorials scattered across the Web. However, that is a *massive* security hole, especially if the backend server is *not* the same as the web server hosting RoundCube. Surely, for example, the RoundCube User does *not* need the ability to create other users or tables, drop the backend database, or grant privileges to other users.

I am going to assume - and please correct me if I am wrong - that the *required* privileges are:

If this information is available on-line, could someone please point me in the correct direction - if not, could one of the devs and/or one of the experienced RoundCube users please let me know this information - thank you.

--
PEREGRINE I.T. Pty Ltd Signature

==================================================

Matthew J BLACK
  M.Inf.Tech.(Data Comms)
  MBA
  B.Sc.
  MACS (Snr), CP, IP3P

When you want it done right – the first time!

Phone:	+61 4 0411 0089
Email:	matthew@peregrineit.net
Web:	www.peregrineit.net

This Email is intended only for the addressee. Its use is limited to that intended by the author at the time and it is not to be distributed without the author’s consent. You must not use or disclose the contents of this Email, or add the sender’s Email address to any database, list, or mailing list unless you are expressly authorised to do so. Unless otherwise stated, PEREGRINE I.T. Pty Ltd accepts no liability for the contents of this Email except where subsequently confirmed in writing. The opinions expressed in this Email are those of the author and do not necessarily represent the views of PEREGRINE I.T. Pty Ltd. This Email is confidential and may be subject to a claim of legal privilege.

If you have received this Email in error, please notify the author and delete this message immediately.