MySQL Forums
Forum List  »  Newbie

Re: insert current_user() by default
Posted by: Phillip Ward
Date: February 14, 2013 06:23AM

Quote

... if I am logged in to the database as 'abcduser' then ...
Permit me to express some "surprise" at this.

In the vast majority of applications I've worked with, the application connects to the database using an "application" account that is centrally controlled and managed. I do not allow individual users to connect to my databases! (OK, you have to Developers in, but end users? No way!)

At a stroke, this eliminates the vast majority of your permissions management headaches because you only have to worry about your "application" accounts (and none for individual users).
OK, you still have to know who's connecting via your application, but that's just data in your own table and nothing to do with the database's security model at all.

Regards, Phill W.

Options: ReplyQuote


Subject
Written By
Posted
Re: insert current_user() by default
February 14, 2013 06:23AM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.