On Fri, Sep 24, 2010 at 3:50 PM, Bob McConnell <r...@cbord.com> wrote:
> From: tedd
>>At 2:36 PM -0400 9/24/10, Bastien Koert wrote:
>>>On Fri, Sep 24, 2010 at 2:26 PM, tedd <tedd.sperl...@gmail.com> wrote:
>>>>  At 2:09 PM -0400 9/24/10, Bastien Koert wrote:
>>>>> �...@tedd,
>>>>>  He wants not techie users to create new systems for their clients
> when
>>>>>  they sign up. It involves creating a DB and he's wondering about
>>>>>  security for that. The main part of the app needs the least priv's
> to
>>>>>  run (select, update, insert [,delete]) while the creating the DB
>>>>>  obviously takes more. The OP was asking how to best handle that
> since
>>>>>  the he didn't want to give the main app DB user account more privs
>>>>>  than needed.
>>>>  Okay, what does creating "new systems for their clients" mean?
>>>>  What I want to know is specifically what these non-techie users
> intend to
>>>>  do?
>>>>  Please don't answer that they want to set up accounts for their
> clients
>>>>  because that is meaningless to me. That could mean anything.
>>>  > So, what specifically are these non-techie users going to do?
>>>Create a DB schema, create and populate tables.
>> Creating a DB schema is not for non-techies -- you really need to
>> know what you are doing to do this.
>> But we all live with what we create.
> I suspect he actually means create a new table using a predefined
> schema. But unfortunately, he doesn't appear to know enough about the
> problem to be able to explain it. He is either in way over his depth, or
> hasn't done a very good job of defining his requirements.
> Bob McConnell

The OP mentioned that each new client needed their own DB so that is
how I took it. Having exactly the exact same tables in the structure
with different names is just bad practice to. That just screams
creating a multi-tenant DB. At work we do create each DB as a clone of
a master table, but it is done manually and thankfully not that often.



Cat, the other other white meat

PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to