Web lists-archives.com

Re: Users and Groups




That reminds me, this may be of interest: http://www.percona.com/blog/2015/03/02/emulating-roles-percona-pam-plugin-proxy-users/

----- Original Message -----
> From: "Lucio Chiappetti" <lucio@xxxxxxxxxxxxxxxx>
> To: "MySql" <mysql@xxxxxxxxxxxxxxx>
> Sent: Wednesday, 4 March, 2015 12:39:01
> Subject: Re: Users and Groups

> When several years ago a colleague here set up the user interface for an
> astronomical database (originally using servlets now with Tomcat, and
> anyhow accessing mysql in JDBC) he considered the internal mysql privilege
> system, and for some reasons decided not to use it.
> 
> He wrote an additional layer inside our java front end. We have
> "workspaces", each workspace can access a number of advertised tables, and
> view advertised columns (but other columns remain accessible if called by
> name). Users belong to one (or more workspaces) and specify it when
> logging in our system.  All workspaces have readonly access (we do not
> consider user-writable tables).   Our java engine communicates with mysql
> as a single user.
> 
> This way we do not have to care about granting access to the mysql server
> to external hosts.
> 
> Anyhow I presume that playing around with the grants and privileges
> tables, one could find a way to write a template set of privileges for a
> "typical user" and replicate it for all users of same "logical group"
> 
> 
> 
> --
> ------------------------------------------------------------------------
> Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy)
> For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html
> ------------------------------------------------------------------------
> Do not like Firefox >=29 ?  Get Pale Moon !  http://www.palemoon.org
> 
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe:    http://lists.mysql.com/mysql

-- 
Unhappiness is discouraged and will be corrected with kitten pictures.

-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/mysql