SQLite module access control
These settings control which database files a Webmin user can open and what the user can do with them. They do not override the filesystem permissions of the selected Unix user.

For Allowed database directories, enter one absolute directory per line. The module allows files in those directories and their subdirectories. Use $HOME for the selected Unix user's home directory. Paths outside the listed directories are rejected. In root mode, $HOME refers to the Unix account whose name matches the Webmin user.

The row and table permission enables forms for editing rows and changing schemas. The file creation permission allows new files in writable allowed directories. The module offers file creation only when the user can also add a table through a form or SQL.

Execute SQL statements permits one direct SQL statement at a time. This is a separate write permission: SQL may change the current database when its file and directory are writable. The module blocks attached databases, extensions, and SQL operations that access other files.

Unix user for database access selects the filesystem identity used by the module. Root normally bypasses file ownership and permissions. A matching or specific Unix user limits access to files that account can read and write.