Home/ Questions/Q 6037557
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T06:05:30+00:00

The datasource used by my web application connects using the ROOT user. The ROOT

  • 0

The datasource used by my web application connects using the ROOT user. The ROOT user has all privileges assigned.

My concerns are:

1) Should I be using this user (and is it ok / secure) or should I create another user with a more restricted set of rights

2) If I do use another user, how do I cater for all my procs that begin with:

CREATE DEFINER=`root`@`%` PROCEDURE `Blah`()

3) Is it a bad idea removing privileges from the ROOT user. For example, if I remove the “DROP” privilege, will I still be able to DROP objects when logging in via the Admin or Query Browser. MY guess would be no and that I shouldn’t mess with the privileges.

Any documentation / links / info regarding this would be appreciated. Thanks

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    1. You should absolutely use a restricted user to access the database as much as possible.

    2. There are privileges that allow your users to access procedures. I’m not that familiar with it but here’s the official documentation: http://dev.mysql.com/doc/refman/5.0/en/create-procedure.html

    3. Don’t mess with root’s privileges 🙂

    • 0