[buddypress-trac] [BuddyPress Trac] #5581: Maybe throw a notice if signups table creation failed

buddypress-trac noreply at wordpress.org
Fri Apr 25 19:48:00 UTC 2014


#5581: Maybe throw a notice if signups table creation failed
-----------------------------------+--------------------
 Reporter:  imath                  |       Owner:
     Type:  enhancement            |      Status:  new
 Priority:  normal                 |   Milestone:  2.0.1
Component:  Administration         |     Version:  2.0
 Severity:  normal                 |  Resolution:
 Keywords:  has-patch 2nd-opinion  |
-----------------------------------+--------------------

Comment (by aaclayton):

 I'll just chime in here as the edge case in question. This issue arose
 after migrating my site to a new hosting environment. I configured the new
 SQL server and created two users, one for the web user and one for
 administrative purposes.

 For most database environments, it's arguably sensible from a security
 standpoint to give the application user account as few permissions as are
 actually required to function properly. I failed to consider the role of
 automatic WordPress installs, upgrades, and plugins which often automate
 some database management, particularly when transitioning between major
 versions.

 The WordPress codex itself says for your SQL user to have global
 permissions:
 http://codex.wordpress.org/Installing_WordPress#Step_2:_Create_the_Database_and_a_User

 I could hardly fault a WordPress plugin for not assuming that these sort
 of baseline instructions are met, so I would understand completely if you
 don't add an additional safety net in BuddyPress to protect against this
 sort of thing.

 That being said, I will probably not have been the only person to
 experience this out of the multitude of BP users worldwide, and this sort
 of problem could be very difficult for a typical user to diagnose and
 correct.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/5581#comment:7>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list