Re: User for multiple schemas

Hai Brian, Glad to know it helps. We’ve found the cause of the problem I mentioned. It’s not random. It has something to do with changing the ROLE of a USER, and then the privileges of that ROLE seem not properly handled. We’re working on improving the documentation, extending the test suite, and fixing bugs concerning privileges. Regards, Jennie

On Jul 14, 2015, at 12:10, Brian Hood wrote:

Hi Jennie,

That was actually what i was looking for thanks for that i didn't realize that you could have more than one create schema schema_name AUTHORIZATION per_user

I'll also see if i encounter the bug and if i can find anything reproducible.

Regards,

Brian Hood

On Tue, Jul 14, 2015 at 10:03 AM, Ying Zhang wrote: Hello Brian,

What authorisation are you looking for? MonetDB does support authorise one user as the owner of multiple schema’s, e.g.:

create user brian with password ’brian123' name ’brian' schema sys; create schema schema1 AUTHORIZATION brian; create schema schema2 AUTHORIZATION brian;

Not sure if this is what you’re looking for.

However, we have noticed a problem (in the current default branch, probably also exists in Jul2015) in handling the privileges. After a user has been authorised as the owner of a schema, the user can CREATE, INSERT, UPDATE, … tables, however, *sometimes* the user can’t SELECT from his/her own tables. This seems to happen at random, which makes it extremely difficult to debug. However, restarting the MonetDB server seems to temporarily resolve the problem.

We’re working on improving handling privileges in MonetDB. If you notice any errors and missing features, please let us know.

Regards,

Jennie

...

On Jun 23, 2015, at 08:05, Stefan Manegold wrote:

Hi Brian,

If i'm not mistaken and recall correctly, access rights / authorization are per table, not per schema - at least in MonetDB; hence, you'd have to grant access for each table in other than the user's schema separately.

Best, Stefan

On June 22, 2015 8:45:08 PM CEST, Brian Hood wrote: Hi All,

There is something I have pondered on is there a way to have a username that can be authorized for multiple schemas under your dbfarm.

If not what is the reason ?

I haven't seen a way to do this so far.

Regards,

Brian Hood

users-list mailing list users-list@monetdb.org https://www.monetdb.org/mailman/listinfo/users-list

-- | Stefan.Manegold@CWI.nl | DB Architectures (DA) | | www.CWI.nl/~manegold/ | Science Park 123 (L321) | | +31 (0)20 592-4212 | 1098 XG Amsterdam (NL) | _______________________________________________ users-list mailing list users-list@monetdb.org https://www.monetdb.org/mailman/listinfo/users-list