Docs: Add note about only needing ro db access

diff --git a/docs/modes-of-operation.rst b/docs/modes-of-operation.rst
index 5e24b13b962592fd4f696ada9b398f91120eb19c..71b2e29b62c7365e6de96bcb7b80b9476649a6b4 100644 (file)
--- a/docs/modes-of-operation.rst
+++ b/docs/modes-of-operation.rst
@@ -23,6 +23,12 @@ PowerDNS users employ Oracle replication which also works very well.
 To use native replication, configure your backend storage to do the
 replication and do not configure PowerDNS to do so.
 
+Typically, a database slave will be configured as read-only as
+uni-directional database replication is usually sufficient. A PowerDNS
+server only requires database write access if it is participating as a
+master or slave in zone transfers, or has a frontend attached for
+managing records etc.
+
 .. _master-operation:
 
 Master operation