On Wed, May 1, 2013 at 6:29 PM, Brian Wolf <brian.w...@activustech.com>wrote:

>  One of our clients has two databases. They've added several users /
> employees In one of the databases, and therefore those users are PostgreSQL
> login roles.  They now want to begin to use the second database, and "carry
> over" some of the users / employees.
>
> Can someone explain clearly best practice for adding users / employees,
> particularly when a login role may already exist?
>

Actually it is fairly simple but an explanation may be a good thing.

The users are actually per database cluster, while access to the database
and to ledgersmb is per database.  When you create a user, it creates a
PostgreSQL user, plus inserts appropriate records in the database.  The
same user could theoretically be granted different permissions on different
databases.  So you want to think about how this will be used.

One option is to create groups for permissions for easy management.  This
must be done in the db (ask specifically on -devel about this if you go
this route), and if you do it right, the groups will just show up on the
permissions screen.  There are ways of setting up global permissions too if
you want to go that route.  Again that is devel territory.

However for the very basic case you can just go into the second database,
go to add a user, don't enter a password, set import to 'yes' and fill out
relevant fields.  This will check to see if the postgresql user exists (and
give you an error if not), and will create the user account without
resetting the password.  The user will then have the same username and
password on both databases, and just enters the name of the database used
in the company field when logging on.  Users can be assigned different
permissions this way on different databases.

One other thing I would recommend is changing the stylesheet on both
databases so folks don't forget which db they are logged into.  Just
changing the background color of the menu helps.

Best Wishes,
Chris Travers




>
> Thanks.
> Brian
>
>   Brian Wolf
> Phone: 410.367.2958
> Email: br...@activustech.com
>  Try out Activus Secure Payments™, our recurring payments application.
> Demo at http://demo.activustech.com
>
>
> ------------------------------------------------------------------------------
> Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
> Get 100% visibility into your production application - at no cost.
> Code-level diagnostics for performance bottlenecks with <2% overhead
> Download for free and get started troubleshooting in minutes.
> http://p.sf.net/sfu/appdyn_d2d_ap1
> _______________________________________________
> Ledger-smb-users mailing list
> Ledger-smb-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/ledger-smb-users
>
>

<<activus_logo_small.png>>

------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1
_______________________________________________
Ledger-smb-users mailing list
Ledger-smb-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ledger-smb-users

Reply via email to