Accounting only needs select, insert, update

Not delete.  Not table mods

diff --git a/raddb/sql/postgresql/admin.sql b/raddb/sql/postgresql/admin.sql
index 74994d3..26d08ca 100644 (file)
--- a/raddb/sql/postgresql/admin.sql
+++ b/raddb/sql/postgresql/admin.sql
@@ -28,5 +28,5 @@ GRANT SELECT ON radusergroup TO radius;
 /*
  * The server can write to the accounting and post-auth logging table.
  */
-GRANT ALL on radacct TO radius;
-GRANT ALL on radpostauth TO radius;
+GRANT SELECT, INSERT, UPDATE on radacct TO radius;
+GRANT SELECT, INSERT, UPDATE on radpostauth TO radius;