[Maria-discuss] Role template
Hi,
Roles [1] have been introduced with MariaDB 10.0.5. This feature is very interesting to group and standardize grants in one place. However roles are static, meaning that it is not possible to create a template to apply later on another database.
I'm looking for something similar to a stored procedure:
CREATE ROLE r1(db); GRANT ALL PRIVILEGES ON $(db).* TO r1;
Here, the role takes a parameter we can use to make privileges a bit more dynamic. We can then apply this role on a dedicated database like:
GRANT r1(mydb) TO 'myuser'@'localhost';
Can this already be done or do you think that's a feature that could come?
[1]: https://mariadb.com/kb/en/roles-overview/
Regards, Jimmy
Hi, Jimmy!
On May 18, Jimmy Thrasibule wrote:
Hi,
Roles have been introduced with MariaDB 10.0.5. This feature is very interesting to group and standardize grants in one place. However roles are static, meaning that it is not possible to create a template to apply later on another database.
I'm looking for something similar to a stored procedure:
CREATE ROLE r1(db); GRANT ALL PRIVILEGES ON $(db).* TO r1;
Here, the role takes a parameter we can use to make privileges a bit more dynamic. We can then apply this role on a dedicated database like:
GRANT r1(mydb) TO 'myuser'@'localhost';
Can this already be done or do you think that's a feature that could come?
no, I don't think this can be done with roles.
that's certainly a feature that could come - particularly if you create a feature request on mariadb.org/jira - but don't hold your breath, it might take a while to get it implemented.
Regards, Sergei
If statements like CREATE ROLE were allowed in prepared statements, this could easily be done with a stored procedure.
Regards Federico
-------------------------------------------- El jue, 22/5/14, Sergei Golubchik serg@mariadb.org escribió:
Asunto: Re: [Maria-discuss] Role template Para: "Jimmy Thrasibule" thrasibule.jimmy@gmail.com CC: maria-discuss@lists.launchpad.net Fecha: jueves, 22 de mayo, 2014 18:52
Hi, Jimmy!
On May 18, Jimmy Thrasibule wrote:
Hi,
Roles have been introduced with MariaDB
10.0.5. This feature is
very
interesting to group and standardize grants in one place. However
roles are static, meaning that
it is not possible to create a template
to apply later on another database.
I'm looking for something similar to a
stored procedure:
CREATE ROLE r1(db); GRANT ALL PRIVILEGES ON
$(db).* TO r1;
Here, the role takes a parameter we can use to make privileges a bit
more dynamic. We can
then apply this role on a dedicated database
like:
GRANT r1(mydb) TO
'myuser'@'localhost';
Can this already be done or do you
think that's a feature that could come?
no, I don't think this can be done with roles.
that's certainly a feature that could come - particularly if you create a feature request on mariadb.org/jira - but don't hold your breath, it might take a while to get it implemented.
Regards, Sergei
_______________________________________________ Mailing list: https://launchpad.net/~maria-discuss Post to : maria-discuss@lists.launchpad.net Unsubscribe : https://launchpad.net/~maria-discuss More help : https://help.launchpad.net/ListHelp
Hi all. Can a SPIDER table, on MariaDB 10.0, connect to a remote MySQL 5.5 table? I can't find this info. If it can, I have a problem I don't understand. I can create the table, but when I execute any query I get:
ERROR 1227 (42000): Access denied; you need (at least one of) the SUPER privilege(s) for this operation
(which is misleading in any case, since I have SUPER)
Nothing is written to the local error log (and I can't access the remote one).
Federico
On 23 May 2014, at 17:38, Federico Razzoli federico_raz@yahoo.it wrote:
Hi all. Can a SPIDER table, on MariaDB 10.0, connect to a remote MySQL 5.5 table? I can't find this info.
Yes it can. I've done this from 10.0 -> mysql 5.5 (spiderformysql release). Adding Kentoku just in case. This was all spider 3.x branch
If it can, I have a problem I don't understand. I can create the table, but when I execute any query I get:
ERROR 1227 (42000): Access denied; you need (at least one of) the SUPER privilege(s) for this operation
(which is misleading in any case, since I have SUPER)
verified thru show grants? Turn on the spider logs to see as well https://mariadb.com/kb/en/spider-server-system-variables/#spider_internal_sq...
-- Colin Charles, Chief Evangelist, SkySQL - The MariaDB Company blog: http://bytebot.net/blog/%7C t: +6-012-204-3201 | Skype: colincharles
participants (4)
-
Colin Charles -
Federico Razzoli -
Jimmy Thrasibule -
Sergei Golubchik