For Allowed database directories, enter one absolute directory per line. The module allows files in those directories and their subdirectories. Use $HOME for the selected Unix user's home directory. Paths outside the listed directories are rejected. In root mode, $HOME refers to the Unix account whose name matches the Webmin user. SQLite 3.39 or later is required for a restricted list because it prevents symbolic links in any path component from escaping these directories. A list containing / does not restrict database paths and does not need this check. This requirement applies to the SQLite library used by DBD::SQLite, which may differ from the system sqlite3 command. Unix permissions still apply, but they do not enforce this module's directory list.

The row and table permission enables forms for editing rows and changing schemas. The file creation permission allows new files in writable allowed directories. The module offers file creation only when the user can also add a table through a form or SQL.

Execute SQL statements permits one direct SQL statement at a time. This is a separate write permission: SQL may change the current database when its file and directory are writable. The module blocks attached databases, extensions, and SQL operations that access other files.

Unix user for database access selects the filesystem identity used by the module. Root normally bypasses file ownership and permissions. A matching or specific Unix user limits access to files that account can read and write.