for T1003, we would like to run a script on the phabricator database to fetch various statistical values (like "how many tickets created" and much more)
in https://gerrit.wikimedia.org/r/#/c/177792/6/modules/phabricator/templates/community_metrics.sh.erb i'd be using a shell script to access the db, like we did in Bugzilla
you see that i could just use the existing "appuser" and password but it has been pointed out by Chase that a separate user would be better and i agree
can you make one more user/grant like "phmetrics" or "phstats" and add it to passwords::mysql::phabricator ($metrics_user = 'phmetrics' .. ?
it should be allowed to connect from server iridium to the phabricator prod db on m3-master and it should be _read-only_ so that even if a script update messes up it can't do any damage. we will just need to select so far from database "phabricator_maniphest"
P.S. should there be a phabricator project called "SQL" or "DB-related" or "DB access requests" or something?