Different MySQL users - one for managing database and one with limited permissions for usage in scripts
As many apps stores MySQL credentials in a plain text inside code. I suggest to provide us with 2 MySQL users
1) Admin user - with the most wide permissions
2) Script user - allowed only to manipulate with rows (CRUD)
This is common security practice on other hostings.
Maekoboss
shared this idea
19 comments
-
Jon F
commented
Also really need this very basic security feature. Note the feature was also raised in 2016 here: https://cloudways.uservoice.com/forums/203824-service-improvement/suggestions/14697246-allow-customers-to-create-database-users.
As others have commented, it's frankly ridiculous that Cloudways have even created a customer-facing UI to handle this but it doesn't work!
-
Anonymous
commented
I contacted cloudways support on similar issue, basically they just tell you it can be done, please pay for the additional $100/month in order for them to proceed with that "customization"
Quote from their customer success manager email.
"I would like to let you know that these changes come under the customization so it would be possible via Advanced Support Add-On which costs $100 Per Month.Advanced support has the ability to customize your server (deploy additional PHP packages, Nginx/Varnish specific configurations). You can ask Cloudways to make specific configuration changes to your server that will follow it through the different platform processes (including but not limited to clone, restore, transfer). Additionally, you will get other perks too, please have a look here and do let us know how would you like to proceed?"
-
Luke
commented
This is basic administration, how is this still an open issue? The database manager interface has the ability to add a user, we're simply restricted from doing so. If you don't want us to be able to add a user, maybe don't include that in your own UI. At a minimum automatically provision a read only user.
-
John
commented
We also need this feature.
Actually we can't host several applications on Cloudways because it would be a security risk to only have one single admin user and also use this one on external services which only need READ access.
-
WeWantExtraDatabaseUsers
commented
This feature really needs to be made available. Most of the hosting providers I have worked with provide this feature.
-
DudeMan
commented
How is this not possible?
-
David
commented
I am very surprised this is unavailable. This is a line in the sand for us to use Cloudways.
-
Yasser
commented
We definitely need this feature. This is crucial to the security of the database.
-
Anonymous
commented
I've signed up to trial - all looks good apart from when I went to setup sql users. like everyone here i have a user for front end and user for admin with different privileges - was taken aback to find i can only have one sql user. Not good.
-
Marco
commented
I'd really need to be able to create DB users and manage privileges to connect MySQL to external services without using the main user
-
Federico
commented
+1, I also need this
-
Ada Maria Lorenc
commented
I would need read-only user for example, so different privileges
-
banarsiamin
commented
Please the ability to add multiple users with different privileges per database
-
Joseph Csoti
commented
I would like to see this implemented as well for security reasons. The policy of "least permissions possible"
This way a user can access the without admin credentials.
-
Anonymous
commented
Please the ability to add multiple users with different privileges per database
-
Thomas
commented
This will be great if it could allow to accept connections from external servers as well. So the ability to create custom users tied to a database per application with the ability to assign connection from/user/pass.
-
Den
commented
Please the ability to add multiple users with different privileges per database
-
Meisam
commented
The ability to add multiple users with different privileges per database
-
Sergio
commented
We also need this feature that is necessary let different users access the database(s). It's also important for security reasons to have more than one unique/single "master/main" database user with all privilegies to connect to database from a server outside of localhost.