Web lists-archives.com

RE: Users and Groups






> Date: Wed, 4 Mar 2015 14:04:55 +0100
> From: vegivamp@xxxxxxxxx
> To: lucio@xxxxxxxxxxxxxxxx
> CC: mysql@xxxxxxxxxxxxxxx
> Subject: Re: Users and Groups
> 
> 
> That reminds me, this may be of interest: http://www.percona.com/blog/2015/03/02/emulating-roles-percona-pam-plugin-proxy-users/

MG>très bon johann !

> ----- Original Message -----
> > From: "Lucio Chiappetti" <lucio@xxxxxxxxxxxxxxxx>
> > To: "MySql" <mysql@xxxxxxxxxxxxxxx>
> > Sent: Wednesday, 4 March, 2015 12:39:01
> > Subject: Re: Users and Groups
> 
> > When several years ago a colleague here set up the user interface for an
> > astronomical database (originally using servlets now with Tomcat, and
> > anyhow accessing mysql in JDBC) he considered the internal mysql privilege
> > system, and for some reasons decided not to use it.
> > 
> > He wrote an additional layer inside our java front end. We have
> > "workspaces", each workspace can access a number of advertised tables, and
> > view advertised columns (but other columns remain accessible if called by
> > name). Users belong to one (or more workspaces) and specify it when
> > logging in our system.  All workspaces have readonly access (we do not
> > consider user-writable tables).   Our java engine communicates with mysql
> > as a single user.
> > 
> > This way we do not have to care about granting access to the mysql server
> > to external hosts.
> > 
> > Anyhow I presume that playing around with the grants and privileges
> > tables, one could find a way to write a template set of privileges for a
> > "typical user" and replicate it for all users of same "logical group"
> > 
> > 
> > 
> > --
> > ------------------------------------------------------------------------
> > Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy)
> > For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html
> > ------------------------------------------------------------------------
> > Do not like Firefox >=29 ?  Get Pale Moon !  http://www.palemoon.org
> > 
> > --
> > MySQL General Mailing List
> > For list archives: http://lists.mysql.com/mysql
> > To unsubscribe:    http://lists.mysql.com/mysql
> 
> -- 
> Unhappiness is discouraged and will be corrected with kitten pictures.
> 
> -- 
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe:    http://lists.mysql.com/mysql
>