That reminds me, this may be of interest: http://www.percona.com/blog/2015/03/02/emulating-roles-percona-pam-plugin-proxy-users/
----- Original Message ----- > From: "Lucio Chiappetti" <lu...@lambrate.inaf.it> > To: "MySql" <mysql@lists.mysql.com> > Sent: Wednesday, 4 March, 2015 12:39:01 > Subject: Re: Users and Groups > When several years ago a colleague here set up the user interface for an > astronomical database (originally using servlets now with Tomcat, and > anyhow accessing mysql in JDBC) he considered the internal mysql privilege > system, and for some reasons decided not to use it. > > He wrote an additional layer inside our java front end. We have > "workspaces", each workspace can access a number of advertised tables, and > view advertised columns (but other columns remain accessible if called by > name). Users belong to one (or more workspaces) and specify it when > logging in our system. All workspaces have readonly access (we do not > consider user-writable tables). Our java engine communicates with mysql > as a single user. > > This way we do not have to care about granting access to the mysql server > to external hosts. > > Anyhow I presume that playing around with the grants and privileges > tables, one could find a way to write a template set of privileges for a > "typical user" and replicate it for all users of same "logical group" > > > > -- > ------------------------------------------------------------------------ > Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) > For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html > ------------------------------------------------------------------------ > Do not like Firefox >=29 ? Get Pale Moon ! http://www.palemoon.org > > -- > MySQL General Mailing List > For list archives: http://lists.mysql.com/mysql > To unsubscribe: http://lists.mysql.com/mysql -- Unhappiness is discouraged and will be corrected with kitten pictures. -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/mysql
