mySQL user management and database access

mySQL db users

There are two identical copies of the db. One main database, which is the reference and from which data can be downloaded, and the review database, to which data are uploaded for review.

Next to the root users, we have

• A read-only user account used by the web interface only
• A public (everybody can use it upon request) read-only user account used for custom queries
• A read&write account to the review database, used by the web interface only
• A read&write account to the review database, used by team members for upload of data batches.
• A read&write account to the main database, use by reviewers to transfer data from the review to the main database.

mySQL password handling

Db usernames and passwords are only to be shared with team members (write access) and upon request (read only access). Care must be taken when using pw in scripts:

• Store username and passwords in separate files, which are imported or read by main scripts
• Use .gitignore to exclude those files from being committed and uploaded on GitHub.
• Inform project leadership in case pw was shared accidentially.