I’m trying to lock down the database on my Drupal 9 install so that people can browse the website, but can’t write to it.
I have 2 users in MariaDB with access to the database. I want to set one account to only be able to write to the needed tables for browsing and give the other account full permissions. To Which tables should the first account have CRUD permissions?
To determine which user to use, I’m going to set an environment variable that will detect the subdomain (admin.site.com) and assign database settings accordingly. I have blocked access to Drupal’s admin/login pages on the main domain while allowing full access on admin.site.com. The subdomain is on a separate IP than the main domain and the firewall blocks access based on the connecting user IP.