AMMOSGH-41: Update user permissions example script to limit sadb_user…

… access
nasa · Apr 14, 2022 · de7cec4 · de7cec4
1 parent 7561de6
commit de7cec4
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/src/crypto_sadb/sadb_mariadb_sql/create_sadb_user_grant_permissions.sql b/src/crypto_sadb/sadb_mariadb_sql/create_sadb_user_grant_permissions.sql
@@ -1,4 +1,11 @@
+DROP USER IF EXISTS 'sadb_admin';
 DROP USER IF EXISTS 'sadb_user';
+
+CREATE USER IF NOT EXISTS sadb_admin IDENTIFIED BY 'sadb_admin_password';
 CREATE USER IF NOT EXISTS sadb_user IDENTIFIED BY 'sadb_password';
 
-GRANT ALL PRIVILEGES ON sadb.* TO 'sadb_user'@'%';
+GRANT ALL PRIVILEGES ON sadb.* TO 'sadb_admin'@'%';
+
+GRANT UPDATE (arsn) ON sadb.security_associations TO 'sadb_user'@'%';
+GRANT UPDATE (iv) ON sadb.security_associations TO 'sadb_user'@'%';
+GRANT SELECT ON sadb.security_associations TO 'sadb_user'@'%';