瀏覽代碼

TG-85: fix db_loader ALTER privileges and missing schema

lanfr144 1 周之前
父節點
當前提交
4711312866
共有 1 個文件被更改,包括 3 次插入6 次删除
  1. 3 6
      init.sql

+ 3 - 6
init.sql

@@ -108,6 +108,7 @@ CREATE TABLE IF NOT EXISTS products (
 ) ENGINE=InnoDB;
 
 -- Step B: The Owner grants explicit privileges to the Reader and Loader
+-- Grant explicit privileges to the Reader
 GRANT SELECT ON food_db.products TO 'db_reader'@'%';
 GRANT SELECT ON food_db.products_core TO 'db_reader'@'%';
 GRANT SELECT ON food_db.products_allergens TO 'db_reader'@'%';
@@ -115,12 +116,8 @@ GRANT SELECT ON food_db.products_macros TO 'db_reader'@'%';
 GRANT SELECT ON food_db.products_vitamins TO 'db_reader'@'%';
 GRANT SELECT ON food_db.products_minerals TO 'db_reader'@'%';
 
-GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE ON food_db.products TO 'db_loader'@'%';
-GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE ON food_db.products_core TO 'db_loader'@'%';
-GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE ON food_db.products_allergens TO 'db_loader'@'%';
-GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE ON food_db.products_macros TO 'db_loader'@'%';
-GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE ON food_db.products_vitamins TO 'db_loader'@'%';
-GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE ON food_db.products_minerals TO 'db_loader'@'%';
+-- Grant broad privileges to the Loader on food_db to allow temp tables and UPSERT modifications
+GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE, ALTER, INDEX ON food_db.* TO 'db_loader'@'%';
 FLUSH PRIVILEGES;
 
 -- Step C: The Loader user would then run this MySQL command to import: