Different MySQL users - one for managing database and one with limited permissions for usage in scripts
As many apps stores MySQL credentials in a plain text inside code. I suggest to provide us with 2 MySQL users
1) Admin user - with the most wide permissions
2) Script user - allowed only to manipulate with rows (CRUD)
This is common security practice on other hostings.
-
LennieWilliamson commented
I am basically a writer working as a freelancer for the https://akshara.ai/ blog and I am also the biggest crazy fan of music and love hearing those albums. I even produced one Rap album too. I generally write reviews for the newly released albums.
-
Jon F commented
Also really need this very basic security feature. Note the feature was also raised in 2016 here: https://cloudways.uservoice.com/forums/203824-service-improvement/suggestions/14697246-allow-customers-to-create-database-users.
As others have commented, it's frankly ridiculous that Cloudways have even created a customer-facing UI to handle this but it doesn't work!
-
Anonymous commented
I contacted cloudways support on similar issue, basically they just tell you it can be done, please pay for the additional $100/month in order for them to proceed with that "customization"
Quote from their customer success manager email.
"I would like to let you know that these changes come under the customization so it would be possible via Advanced Support Add-On which costs $100 Per Month.Advanced support has the ability to customize your server (deploy additional PHP packages, Nginx/Varnish specific configurations). You can ask Cloudways to make specific configuration changes to your server that will follow it through the different platform processes (including but not limited to clone, restore, transfer). Additionally, you will get other perks too, please have a look here and do let us know how would you like to proceed?"
-
Luke commented
This is basic administration, how is this still an open issue? The database manager interface has the ability to add a user, we're simply restricted from doing so. If you don't want us to be able to add a user, maybe don't include that in your own UI. At a minimum automatically provision a read only user.
-
John commented
We also need this feature.
Actually we can't host several applications on Cloudways because it would be a security risk to only have one single admin user and also use this one on external services which only need READ access.
-
WeWantExtraDatabaseUsers commented
This feature really needs to be made available. Most of the hosting providers I have worked with provide this feature.
-
DudeMan commented
How is this not possible?
-
David commented
I am very surprised this is unavailable. This is a line in the sand for us to use Cloudways.
-
Yasser commented
We definitely need this feature. This is crucial to the security of the database.
-
Anonymous commented
I've signed up to trial - all looks good apart from when I went to setup sql users. like everyone here i have a user for front end and user for admin with different privileges - was taken aback to find i can only have one sql user. Not good.
-
Marco commented
I'd really need to be able to create DB users and manage privileges to connect MySQL to external services without using the main user
-
Federico commented
+1, I also need this
-
Ada Maria Lorenc commented
I would need read-only user for example, so different privileges
-
Nate commented
We would like the ability to have multiple user accounts to our database so that we can have different levels of access/permission.
-
banarsiamin commented
Please the ability to add multiple users with different privileges per database
-
Joseph Csoti commented
I would like to see this implemented as well for security reasons. The policy of "least permissions possible"
This way a user can access the without admin credentials.
-
Anonymous commented
Please the ability to add multiple users with different privileges per database
-
Thomas commented
This will be great if it could allow to accept connections from external servers as well. So the ability to create custom users tied to a database per application with the ability to assign connection from/user/pass.
-
Den commented
Please the ability to add multiple users with different privileges per database
-
Meisam commented
The ability to add multiple users with different privileges per database