Assign right permissions to users

playbooks/roles/mariadb/tasks/main.yml

@@ -75,7 +75,7 @@
   mysql_user:
     name: "{{ item.user }}"
     password: "{{ item.pass }}"
-    priv: "{{ item.db }}.*:ALL"
+    priv: "{{ item.db }}.*:SELECT,INSERT,UPDATE,DELETE"
     host: "{{ MARIADB_HOST_PRIV }}"
     append_privs: yes
   when: item.db != None and item.db != ''
@@ -126,7 +126,7 @@
   mysql_user:
     name: "{{ COMMON_MYSQL_READ_ONLY_USER }}"
     password: "{{ COMMON_MYSQL_READ_ONLY_PASS }}"
-    priv: "*.*:ALL"
+    priv: "*.*:SELECT"
 
 - name: setup the admin db user
   mysql_user: