> Date: Wed, 4 Mar 2015 14:04:55 +0100
> From: vegiv...@tuxera.be
> To: lu...@lambrate.inaf.it
> CC: mysql@lists.mysql.com
> Subject: Re: Users and Groups
>
>
> That reminds me, this may be of interest:
> http://www.percona.com/blog/2015/03/02/emulating-roles-percona-pam-plugin-proxy-users/
MG>très bon johann !
> ----- Original Message -----
> > From: "Lucio Chiappetti" <lu...@lambrate.inaf.it>
> > To: "MySql" <mysql@lists.mysql.com>
> > Sent: Wednesday, 4 March, 2015 12:39:01
> > Subject: Re: Users and Groups
>
> > When several years ago a colleague here set up the user interface for an
> > astronomical database (originally using servlets now with Tomcat, and
> > anyhow accessing mysql in JDBC) he considered the internal mysql privilege
> > system, and for some reasons decided not to use it.
> >
> > He wrote an additional layer inside our java front end. We have
> > "workspaces", each workspace can access a number of advertised tables, and
> > view advertised columns (but other columns remain accessible if called by
> > name). Users belong to one (or more workspaces) and specify it when
> > logging in our system. All workspaces have readonly access (we do not
> > consider user-writable tables). Our java engine communicates with mysql
> > as a single user.
> >
> > This way we do not have to care about granting access to the mysql server
> > to external hosts.
> >
> > Anyhow I presume that playing around with the grants and privileges
> > tables, one could find a way to write a template set of privileges for a
> > "typical user" and replicate it for all users of same "logical group"
> >
> >
> >
> > --
> > ------------------------------------------------------------------------
> > Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy)
> > For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html
> > ------------------------------------------------------------------------
> > Do not like Firefox >=29 ? Get Pale Moon ! http://www.palemoon.org
> >
> > --
> > MySQL General Mailing List
> > For list archives: http://lists.mysql.com/mysql
> > To unsubscribe: http://lists.mysql.com/mysql
>
> --
> Unhappiness is discouraged and will be corrected with kitten pictures.
>
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe: http://lists.mysql.com/mysql
>
