MySQL documentation gives some examples of creating users in MySQL. Among the examples are creating users that only have access to a specific database, or 'tied-to-database', as I say. This is preferred from a security standpoint because you can avoid using root to access services like s9y and use this 'limited' user instead. Let's look at one of the examples in there.
GRANT SELECT,INSERT,UPDATE,DELETE,CREATE,DROP ON bankaccount.* TO 'custom'@'localhost' IDENTIFIED BY 'obscure';
This is supposed to create a user called 'custom' on the 'localhost' domain that has the password of 'obsecure' and can only access 'bankaccount' database. Now this looks alright, but it poses a bit of problem with s9y.
Things I like about this release:
- Native UTF-8 support: now I don't have to edit the language files to have the site running in full UTF-8 mode.
- Better SPARTACUS: plugin updates got better.
- Improved management UI: multiple file uploads, returns to overview page after managing entries/comments, and so on.
- Flexible permalink: I guess now I have more control over the URL of my blog.
And much, much more. If you see any problems on the site, tell me about it. I've adjusted the settings to have the site running properly with the upgrade, but maybe I missed something out.