Subject | RE: [firebird-support] Roles in Firebird |
---|---|
Author | Vahan Yoghoudjian |
Post date | 2005-06-03T10:37:51Z |
Hi Alexandre...
It's pretty much what I want, let me give tell what I need for and maybe
you can give me hints...
I have a table of clients (like we all do) containing a field called
Balance. Now in my application users have privileges, a manager can see a
balance while a regular user should not. I know this can be done at
application level but I was wondering if it was possible to do it at
database level, not to fetch 'forbidden' fields at all if not necessary.
Now, if I want to write views, I'll have one that says for example:
"select field1,field2,field3,balance from Clients"
and another
"select field1,field2,field3 from Clients" (without the balance field)
and then in my application I have to check the roles of the users anyway to
know which view to use...
I was wondering if similar cases can be solved at Firebird database level...
Thank you for your reposnses
Vahan
-----Original Message-----
From: firebird-support@yahoogroups.com
[mailto:firebird-support@yahoogroups.com]On Behalf Of Alexandre Benson Smith
Sent: Friday, June 03, 2005 11:17 AM
To: firebird-support@yahoogroups.com
Subject: Re: [firebird-support] Roles in Firebird
Alan McDonald wrote:
I think he asks for a hiden field option in the table controlled by role
grants (I suppose it because he mentions views).
i.e. if the role has no access to the view and it issue a select * the
fields doesn't appear or appear as nulls, don't know... but I am just
speculating on what I think he wants... :-)
see you !
--
Alexandre Benson Smith
Development
THOR Software e Comercial Ltda.
Santo Andre - Sao Paulo - Brazil
www.thorsoftware.com.br
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.323 / Virus Database: 267.5.0 - Release Date: 02/06/2005
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Visit http://firebird.sourceforge.net and click the Resources item
on the main (top) menu. Try Knowledgebase and FAQ links !
Also search the knowledgebases at http://www.ibphoenix.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
----------------------------------------------------------------------------
----
Yahoo! Groups Links
a.. To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/
b.. To unsubscribe from this group, send an email to:
firebird-support-unsubscribe@yahoogroups.com
c.. Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
[Non-text portions of this message have been removed]
It's pretty much what I want, let me give tell what I need for and maybe
you can give me hints...
I have a table of clients (like we all do) containing a field called
Balance. Now in my application users have privileges, a manager can see a
balance while a regular user should not. I know this can be done at
application level but I was wondering if it was possible to do it at
database level, not to fetch 'forbidden' fields at all if not necessary.
Now, if I want to write views, I'll have one that says for example:
"select field1,field2,field3,balance from Clients"
and another
"select field1,field2,field3 from Clients" (without the balance field)
and then in my application I have to check the roles of the users anyway to
know which view to use...
I was wondering if similar cases can be solved at Firebird database level...
Thank you for your reposnses
Vahan
-----Original Message-----
From: firebird-support@yahoogroups.com
[mailto:firebird-support@yahoogroups.com]On Behalf Of Alexandre Benson Smith
Sent: Friday, June 03, 2005 11:17 AM
To: firebird-support@yahoogroups.com
Subject: Re: [firebird-support] Roles in Firebird
Alan McDonald wrote:
>> Can I use roles to control field access in Firebird or views are theAlan,
>>only way to implement this...
>>
>> Is ther any future plans in Firebird 2.0 or higher for roles?
>>
>>Thank you in advance
>>Vahan
>>
>>
>>
>
>yes you can apply roles and operations to roles on fields
>Alan
>
>
>
>
>
I think he asks for a hiden field option in the table controlled by role
grants (I suppose it because he mentions views).
i.e. if the role has no access to the view and it issue a select * the
fields doesn't appear or appear as nulls, don't know... but I am just
speculating on what I think he wants... :-)
see you !
--
Alexandre Benson Smith
Development
THOR Software e Comercial Ltda.
Santo Andre - Sao Paulo - Brazil
www.thorsoftware.com.br
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.323 / Virus Database: 267.5.0 - Release Date: 02/06/2005
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Visit http://firebird.sourceforge.net and click the Resources item
on the main (top) menu. Try Knowledgebase and FAQ links !
Also search the knowledgebases at http://www.ibphoenix.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
----------------------------------------------------------------------------
----
Yahoo! Groups Links
a.. To visit your group on the web, go to:
http://groups.yahoo.com/group/firebird-support/
b.. To unsubscribe from this group, send an email to:
firebird-support-unsubscribe@yahoogroups.com
c.. Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
[Non-text portions of this message have been removed]