On Mon, 2002-02-18 at 21:40, [EMAIL PROTECTED] wrote:
> I'm wondering about row level privilages - being able to restrict what
> people see and can update etc on a row level as well as a column/table
> level.  

> So,  anyone got any ideas about how you'd best go about this?  Will
> triggers/ store proceedures help (or does it need to be in the engine of the
> database to really work)?

Having implemented something of this nature on another RDBMC, I have to
say that I do not think this would easily be acomplished with MySQL's
current feature-set.

If you want this controlled strictly by the database (and that is not
necessarily the best solution), you will either need stored procedures
which implement a home-grown security model (easily side-stepped by a
direct connection to the database), or views (with a custom set of views
for every table for every "access level").

Someone far wiser than I may have a better idea, but if you want to be
able to implement row-level security even with a direct connection to
the DB (and cannot "implement" this by simply placing the tables into
several databases), you need views.



---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to