Offline Mode

avatar

Hi Devolutions- Team

Because we are using vpn connections the MySQL-DB within the connection data is offline, sometimes. I would like to use the offline option in Read-write. At the moment I can not change offline, only read.
I followed your youtube video and changed the 3 steps on "Data Sources", Data Source Settings" & "User Settings" without success. On User Management the RDM says:


What do I have to change? The user on the database has all Grants on the Schema (no grants on the whole DB):


Greethings, Thomas

2017-04-18_15h53_49.png

2017-04-18_15h51_23.png

All Comments (4)

avatar

Hello,

Does your rdm-qt user has been created in RDM with the Root account as example?

What is strange, is that your second print screen show us that your user looks like to have the Administrator privilige, but the error message mentioned that you don't have enough permissions.

Best regards,

Jeff Dagenais

avatar

Hi Jeff,


thanks for your answer.
The User and table has been created in our db. I connected from RDM to the user with the given pw and created the schema with the app.
We don't want to give this user root rights for safety reasons. For my understanding it should be enough when the user has grants on his own table. Is this correct?


Best regards, Thomas


*Update:
I gave the RDM User "Update" & "Select"- rights to the global "user" table -> now it works.

But could you please tell me which rights the RDM User really needs on "Select" & "Update" commands:
Host, User, Select_priv, Insert_priv, Update_priv, Delete_priv, Create_priv, Drop_priv, Reload_priv, Shutdown_priv, Process_priv, File_priv, Grant_priv, References_priv, Index_priv, Alter_priv, Show_db_priv, Super_priv, Create_tmp_table_priv, Lock_tables_priv, Execute_priv, Repl_slave_priv, Repl_client_priv, Create_view_priv, Show_view_priv, Create_routine_priv, Alter_routine_priv, Create_user_priv, Event_priv, Trigger_priv, Create_tablespace_priv, ssl_type, ssl_cipher, x509_issuer, x509_subject, max_questions, max_updates, max_connections, max_user_connections, plugin, authentication_string, password_expired, password_last_changed, password_lifetime, account_locked


Best regards, Thomas

avatar

Thomas,

Here are the SQL statements we run against the mysql.user table.

Administrator accounts onlyselect count(*) from mysql.user where super_priv = 'Y' and user = @userand
select count(*) FROM mysql.user WHERE user = @user
They will also execute commands like the following CREATE USER `user_name` IDENTIFIED BY 'user_password';that will affect the mysql.user table

Stéfane Lavergne

avatar

Thomas,

I'm not sure what exactly you're asking or trying to do but let me try to clarify what I can.

RDM grants privileges for admin & non-admin users differently. Keep in mind we are not as granular as what we do with Microsoft SQL Server for example.

Admins (rdm_admin user for example)GRANT SELECT ON `mysql`.`user` TO 'rdm_admin'@'%' WITH GRANT OPTION;
GRANT ALL PRIVILEGES ON `rdm_db`.* TO 'rdm_admin'@'%' WITH GRANT OPTION;
GRANT CREATE USER ON *.* TO 'rdm_admin'@'%' WITH GRANT OPTION;
Non-admins (rdm_user user for example)GRANT SELECT, INSERT, DELETE, UPDATE ON `rdm_db`.* TO 'rdm_user'@'%';
GRANT EXECUTE ON `rdm_db`.* TO 'rdm_user'@'%';
All other rights/privileges are manager by RDM. If you want to manually create a non-admin user. Then create the MySQL login and run the two grant statements above and all should work.

Let me know if answered your question.

Best regards,

Stéfane Lavergne