#-------------------------------------------- 
# Permissions for MySQL Database Assessments
#-------------------------------------------- 

# 10.228.70.20 - This is the Imperva Production appliance that performs vulnerability and compliance scans

# Create imperva user to perform vulnerability and complaince scans

CREATE USER IF NOT EXISTS  'z-impvuser'@'10.228.70.20' IDENTIFIED BY 'KAl7FCzMNgIoPwAI';

# The following object permissions are required:

# The reason granting a select privilege on all tables in all databases is the behavior of the INFORMATION_SCHEMA.
# INFORMATION_SCHEMA provides access to database metadata. Each MySQL user has the right to access these tables,
# but can see only the rows in the tables that correspond to objects for which the user has the proper access privileges.

# For MySQL version 8, the following object permissions are required:

GRANT PROCESS, SELECT, SHOW DATABASES, SHOW VIEW  ON *.* TO 'z-impvuser'@'10.228.70.20';

# Note: There is only one test that requires use of this permissions. It checks usage of encryption for
# tables and tablespaces as any sensitive data must be encrypted. Otherwise it is subject to
# compromise and unauthorized disclosure.

FLUSH PRIVILEGES;



//inform Imperva
email to AwadhwalK@DNB.com