php - Should I use Postgres's roles system for a web app's user management? -

-

postgres has featured user management system. why should duplicate functionality , use 1 on top of that? , think right place manage users & groups allows fine-grained control. wrong? there php libraries have done that?
should add app in question not public web-site, corporate app working in private network.

i advocate application designers make use of postgresql's users , role system ... number of reasons having 1:1 mapping of app users database users not practical.

  • postgresql roles shared across all databases (though don't have granted rights on except one)

  • you can't have foreign key reference normal application table postgresql user table

  • there's no function or other interface authenticate user password. have make new connection authenticate password. breaks connection pooling.

instead, advise use couple of roles in database:

  • a database owner role. user/role owns database , tables within it. scripts change database structure ("migrations" , on) run user.

  • a webapp role. role app connects when establishing pooled connections. granted access app needs when running day day. can't change table structure, drop tables, etc. if table supposed append-only don't grant update rights role.

  • (possibly) maintenance roles scripts, etc, have limited access need task.

you manage application users normal tables.

sometimes want additional database roles particular categories of user. can handy if you're dealing apps different privilege levels, departments, etc. webapp can set role switch roles, if "joe" connects , know "joe" in accounts, "set role accounts" before running queries joe. more advanced, , people don't need it.

the main time think using postgresql user management directly makes sense when app has quite complex access requirements , doesn't need huge profusion of different users (thousands, rather millions). webapps i'd stick normal database tables , separate "db admin"role webapp connection pool role.


Comments

Post a Comment

Popular posts from this blog

python - pip install -U PySide error -

-
does know how avoid following error when running pip install -u pyside per official website instructions here: https://pypi.python.org/pypi/pyside/#installing-pyside-on-a-mac-os-x-system note have done brew install qt successfully. you using pip version 7.0.3, version 7.1.2 available. should consider upgrading via 'pip install --upgrade pip' command. collecting pyside using cached pyside-1.2.4.tar.gz installing collected packages: pyside running setup.py install pyside complete output command /applications/anaconda/bin/python -c "import setuptools, tokenize;__file__='/private/var/folders/dy/ttgqhqqx3g9bsbsnqnxsk2z80000gq/t/pip-build-cpxemt/pyside/setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" install --record /var/folders/dy/ttgqhqqx3g9bsbsnqnxsk2z80000gq/t/pip-0r7hri-record/install-record.txt --single-version-externally-managed --compile: ...
Read more

arrays - C++ error: a brace-enclosed initializer is not allowed here before ‘{’ token -

-
simple question: i'm trying initialize array within c++ class declaration: using namespace std; #include <string> class myclass{ public: string myarray[] = {"a","b","c"}; }; and i'm getting error: error: brace-enclosed initializer not allowed here before ‘{’ token no, without complied c++11 compiler, cannot initialize member array in declaration. have initialize array member in constructor. , don't use open array if know number of elements initialize array.
Read more

cytoscape.js - How to add nodes to Dagre layout with Cytoscape -

-
i trying add nodes dagre graph through cityscape.js. problem nodes not painted. code have: cy.add({ group: "nodes", data: { id:"n0",name:"n0",weight: 75 }, }); $.ajax(url).done(function(jsontree){ var newnodes=[]; for(var i=1;i<6;i++){ //var child = jsontree.result[i]; newnodes.push( { group: "nodes", data: { id: "n"+i, name:"n"+i}}, { group: "edges", data: { id: "e"+i, source: "n0", target: "n"+i } } ); } cy.add(newnodes); any ideas? have used loaded function reload graph not work. not know if have use specific function reload graph. thank in advance. you need add positions new nodes. cytoscape.js docs : it important note positions of newly added nodes must defined when calling cy.add(). nodes can not placed in graph without valid position — otherwise not displayed. yo...
Read more