#!/bin/bash

# Usage: ./create_mysql_user_db.sh <db_name> <db_user> <db_pass>

DB_NAME="$1"
DB_USER="$2"
DB_PASS="$3"

if [ "$#" -ne 3 ]; then
    echo "Usage: $0 <db_name> <db_user> <db_pass>"
    exit 1
fi

# Using stored login path from mysql_config_editor
mysql --login-path=localroot <<EOF
-- Create database if not exists
CREATE DATABASE IF NOT EXISTS \`$DB_NAME\`;

-- Create user if not exists
CREATE USER IF NOT EXISTS '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASS';

-- Grant limited permissions on the database
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE ON \`$DB_NAME\`.* TO '$DB_USER'@'localhost';

-- Apply privileges
FLUSH PRIVILEGES;
EOF

echo "✅ Database '$DB_NAME' and user '$DB_USER' created with limited permissions."