Re: Record level access controls

["William R. Mussatto" <mussatto@xxxxxxx>]

On Fri, 5 Jan 2001, Josh Goodman wrote:

> Date: Fri, 5 Jan 2001 15:20:59 -0700 (MST)
> From: Josh Goodman <jogoodma@xxxxxxxx>
> To: mysql@xxxxxxxxxxxxxxx
> Subject: Record level access controls
> 
> 
> I need to create a database that has both private and public records
> together in one database.  Essentially what I need is a way to define
> record or row level access controls.  Has anyone ever implemented this
> type of setup with a mySQL database and what has worked for you?
> 
> A few people in this area told me that you could implement access
> controls with some commercial LDAP servers.  From what I know of LDAP I am
> not sure how this would tie into the mySQL database and I think they may
> have mis-understood my question.
>   
> I realize that this type of restriction can be written into the web 
> application that connects to the DB but I need something that is more 
> flexible than that.  I would prefer to not write security access controls
> into the application itself.  Most of our applications are written in PERL
> and interface via the DBI module.
You might want to create some perl subroutines/functions which map the 
dbi equivalents but add the business rules you are talking about.  
Otherwise you might be able to do it by careful queries and stored them 
in a .ph or .pm file and alwaysed used those.

>   
>   
> Thanks in advance,
> Josh Goodman
> 
> 
> 
> 
> -- 
> ---------------------------------------------------------------------
> Please check "http://www.mysql.com/documentation/manual.php"; before
> posting. To request this thread, e-mail mysql-thread60829@xxxxxxxxxxxxxxx
> 
> To unsubscribe, send a message to:
>     <mysql-unsubscribe-mussatto=csz.com@xxxxxxxxxxxxxxx>
> 
> If you have a broken mail client that cannot send a message to
> the above address (Microsoft Outlook), you can use:
>     http://lists.mysql.com/php/unsubscribe.php
> 

Sincerely,

William Mussatto, Senior Systems Engineer
CyberStrategies, Inc
ph. 909-920-9154 ext. 27


-- 
---------------------------------------------------------------------
Please check "http://www.mysql.com/documentation/manual.php"; before
posting. To request this thread, e-mail mysql-thread60901@xxxxxxxxxxxxxxx

To unsubscribe, send a message to:
    <mysql-unsubscribe-treed=ultraviolet.org@xxxxxxxxxxxxxxx>

If you have a broken mail client that cannot send a message to
the above address (Microsoft Outlook), you can use:
    http://lists.mysql.com/php/unsubscribe.php