<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">2015-11-18 13:34 GMT+01:00 Richard Mortimer <span dir="ltr"><<a href="mailto:richm+digikam@oldelvet.org.uk" target="_blank">richm+digikam@oldelvet.org.uk</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">On 18/11/2015 12:02, Henrique Santos Fernandes wrote:<br>
>     MariaDB [(none)]>  show grants for 'digikam'@'localhost';<br>
>     +----------------------------------------------------------------------------------------------------------------+<br>
><br>
>     | Grants for digikam@localhost<br>
>                                                                                       |<br>
><br>
>     +----------------------------------------------------------------------------------------------------------------+<br>
><br>
>     | GRANT SUPER ON *.* TO 'digikam'@'localhost' IDENTIFIED BY PASSWORD<br>
>     '*B86D61DED45FEAAB193591C66C302416B0E64CA6' |<br>
>     | GRANT ALL PRIVILEGES ON `digikamcoredb`.* TO 'digikam'@'localhost'<br>
>                                                 |<br>
>     | GRANT ALL PRIVILEGES ON `digikamthumbsdb`.* TO<br>
>     'digikam'@'localhost'                                           |<br>
>     | GRANT ALL PRIVILEGES ON `digikamfacedb`.* TO 'digikam'@'localhost'<br>
>                                                 |<br>
>     +----------------------------------------------------------------------------------------------------------------+<br>
><br>
>     4 rows in set (0.00 sec)<br>
><br>
>     Gilles<br>
><br>
><br>
> I am no expert but it seens that user 'digikam'@'localhost' dont need a<br>
> password to the databases digikamcoredb, digikamthumbsdb and digikamfacedb<br>
> It only need password when using things when need super privileges right?<br>
</span>No. The password is a global connection setting for that user/host<br>
combination and applies to all databases.<br>
<br>
I really am surprised that digikam needs SUPER privileges. Usual setup<br>
would be to set the password using USAGE privilege.<br></blockquote><div><br></div><div>Me too...</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
GRANT USAGE ON *.* TO 'digikam'@'localhost' IDENTIFIED BY PASSWORD<br>
'*B86D61DED45FEAAB193591C66C302416B0E64CA6';<br></blockquote><div><br></div><div>Interresting to investiguate. But see below...</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
If SUPER really is required I suspect it is because of the stored<br>
procedure that is used to emulate "IF EXISTS" when adding the indexes.<br>
Even then I would suspect that we could come up with a reduced set of<br>
privileges to access the "mysql" meta database.<br></blockquote><div><br></div><div>yes it is. My investigations revelate that we need to create table on server through this commands :</div><div><br></div><div><span style="font-family:monospace"><span style="color:rgb(0,0,0)">CREATE DATABASE digikamcoredb; </span></span><span style="color:rgb(0,0,0);font-family:monospace">GRANT ALL PRIVILEGES ON digikamcoredb.* TO 'digikam'@'localhost' IDENTIFIED BY 'digikam'; </span><span style="color:rgb(0,0,0);font-family:monospace">FLUSH PRIVILEGES; </span></div><div><span style="font-family:monospace">CREATE DATABASE digikamthumbsdb; GRANT ALL PRIVILEGES ON digikamthumbsdb.* TO 'digikam'@'localhost' IDENTIFIED BY 'digikam'; </span><span style="font-family:monospace">FLUSH PRIVILEGES; </span></div><div><span style="font-family:monospace">CREATE DATABASE digikamfacedb; </span><span style="font-family:monospace">GRANT ALL PRIVILEGES ON digikamfacedb.* TO 'digikam'@'localhost' IDENTIFIED BY 'digikam'; </span><span style="font-family:monospace">FLUSH PRIVILEGES; </span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace">... and to be able to run index creation procedures, we need :</span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace">GRANT SUPER ON *.* TO 'digikam'@'localhost';FLUSH PRIVILEGES;</span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace">... because in SQL procedure code we have :</span></div><div><span style="font-family:monospace"><br></span></div>SQL SECURITY INVOKER</div><div class="gmail_quote"><br></div><div class="gmail_quote">If i drop it, "<span style="font-family:monospace">GRANT SUPER ON *.* TO 'digikam'@'localhost';FLUSH PRIVILEGES;" command at init table is not necessary anymore...</span></div><div class="gmail_quote"><font face="monospace"><br></font></div><div class="gmail_quote"><font face="monospace">This is a first step in the right direction, i hope.</font></div><div class="gmail_quote"><font face="monospace"><br></font></div><div class="gmail_quote"><font face="monospace">But, for an internal server solution, this continue to stop at the first run with an error message about the index creation procedure which cannot be executed. I don't know why...</font></div><div class="gmail_quote"><font face="monospace"><br></font></div><div class="gmail_quote"><font face="monospace">Gilles</font></div><div class="gmail_quote"><font face="monospace"><br></font></div><div class="gmail_quote"><font face="monospace"><br></font><div><span style="font-family:monospace"><span style="font-weight:bold;color:rgb(255,84,84)"><br></span></span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace"><br>
<br></span></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
I'm trying to find the time to build myself a copy of git against Ubuntu<br>
14.04 (trusty) so that I can give this a look. Does anyone know if the<br>
qt5 library versions included with trusty are recent enough or do I need<br>
to load a PPA from somewhere? I digikam from the philip5/extra/ubuntu<br>
trusty PPA installed already.<br>
<br>
Regards<br>
<span class=""><font color="#888888"><br>
Richard<br>
</font></span><div class=""><div class="h5"><br>
_______________________________________________<br>
Digikam-users mailing list<br>
<a href="mailto:Digikam-users@kde.org">Digikam-users@kde.org</a><br>
<a href="https://mail.kde.org/mailman/listinfo/digikam-users" rel="noreferrer" target="_blank">https://mail.kde.org/mailman/listinfo/digikam-users</a><br>
</div></div></blockquote></div><br></div></div>