Re: reset user passwords

[Peter Brawley]

If each user has her own MySQL logon, each user has direct access to the MySQL server. Not secure, to put it mildly.

The more careful approach for an app is to define sets of privileges ("roles"), create MySQL user roles for those privilege sets, never publish those passwords to users, instead assign roles in your app and manage their access to your app in that app.



Edited 1 time(s). Last edit at 12/17/2020 10:39AM by Peter Brawley.