Merge pull request #77 from kiloutyg/76-create-a-powerbi-dedicated-us…

…er-with-only-read-privileges 76 create a powerbi dedicated user with only read privileges
kiloutyg · Mar 19, 2024 · 95731cc · 95731cc
2 parents c854d95 + ed539a1
commit 95731cc
Show file tree

Hide file tree

Showing 6 changed files with 479 additions and 475 deletions.
diff --git a/composer.lock b/composer.lock
diff --git a/create-power-bi-ronlyuser.sql b/create-power-bi-ronlyuser.sql
@@ -0,0 +1,3 @@
+CREATE USER 'powerbi'@'%' IDENTIFIED BY 'powerbi';
+GRANT SELECT ON efncdb.* TO 'powerbi'@'%';
+FLUSH PRIVILEGES;
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -10,6 +10,7 @@ services:
       MYSQL_PASSWORD: ${MYSQL_PASSWORD}
     volumes:
       - ./database_data:/var/lib/mysql
+      - ./create-power-bi-ronlyuser.sql:/docker-entrypoint-initdb.d/create-readonly-user.sql
     ports:
       - "3307:3306"
     networks:
@@ -20,6 +21,7 @@ services:
       # - "traefik.http.routers.database-efnc.rule=PathPrefix(`/database-efnc`)"
       # - "traefik.http.routers.database-efnc.entrypoints=mariadb"
       # - "traefik.tcp.routers.tcp-database-efnc.entrypoints=mariadb"
+    command: ['--init-file', '/docker-entrypoint-initdb.d/create-readonly-user.sql']
 
   phpmyadmin:
     image: phpmyadmin/phpmyadmin

diff --git a/env_create.sh b/env_create.sh
@@ -99,6 +99,13 @@ class Kernel extends BaseKernel
 }
 EOL
 
+# Create the create-power-bi-ronlyuser.sql file 
+cat > create-power-bi-ronlyuser.sql <<EOL
+CREATE USER 'powerbi'@'%' IDENTIFIED BY 'powerbi';
+GRANT SELECT ON ${MYSQL_DATABASE}.* TO 'powerbi'@'%';
+FLUSH PRIVILEGES;
+EOL
+
 # Create .env file
 cat > .env <<EOL
 MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}

diff --git a/env_update.sh b/env_update.sh
@@ -1,8 +1,10 @@
 #!/bin/bash
 
-cat > ~/.ssh/config <<EOL
-Host github.com
-    StrictHostKeyChecking no
+# Create the create-power-bi-ronlyuser.sql file 
+cat > create-power-bi-ronlyuser.sql <<EOL
+CREATE USER 'powerbi'@'%' IDENTIFIED BY 'powerbi';
+GRANT SELECT ON ${MYSQL_DATABASE}.* TO 'powerbi'@'%';
+FLUSH PRIVILEGES;
 EOL
 
 read -p "What Timezone to use? (default Europe/Paris) " TIMEZONE