FW: [GUSDEV] GUS DB Level Permissions

[Michael S. <msa...@pc...>]

cc:ing the list.

------ Forwarded Message
> From: Ed Robinson <ero...@ug...>
> Date: Wed, 26 Oct 2005 09:23:08 -0400
> To: Michael Saffitz <msa...@pc...>
> Subject: Re: [GUSDEV] GUS DB Level Permissions
> 
> I think GUSR and GUSW should be enough.  I think you're asking
> for real management nightmares trying to decide and manage
> permissions at an install level.  Just my two cents, but I
> think you're create far more headaches then they're worth.
> 
> -ed
> 
> 
> 
> ---- Original message ----
>> Date: Wed, 26 Oct 2005 08:54:41 -0400
>> From: Michael Saffitz <msa...@pc...>
>> Subject: [GUSDEV] GUS DB Level Permissions
>> To: Gusdev gusdev-gusdev <gus...@li...>
>> 
>> 
>> I'm curious how other groups are addressing database level
>> permissions/privileges, especially within Oracle.  The
> motivation for this
>> is to see if there are a set of base privileges that are
> common enough that
>> we could have the installer automatically apply for all sites.
>> 
>> Here at CBIL, we use two roles, GUS_R and GUS_W (read and
> write) that are
>> given select on all tables/views and
> update/insert/delete/select on all
>> tables/views/sequences (respectively).  Users are then
> granted the roles as
>> appropriate.
>> 
>> Does anyone have any strong objections for including these
> grants as part of
>> the install process?  What other privilege models are folks
> using that may
>> be a better approach?  One option is to use a cascading role
> system and have
>> GUS_W (for example) be granted RAD_W, DOTS_W, ..., which are
> then granted
>> the individual schema level privileges.
>> 
>> --Mike
>> 
>> 
>> 
>> 
>> -------------------------------------------------------
>> This SF.Net email is sponsored by the JBoss Inc.
>> Get Certified Today * Register for a JBoss Training Course
>> Free Certification Exam for All Training Attendees Through
> End of 2005
>> Visit http://www.jboss.com/services/certification for more
> information
>> _______________________________________________
>> Gusdev-gusdev mailing list
>> Gus...@li...
>> https://lists.sourceforge.net/lists/listinfo/gusdev-gusdev
> -----------------
> Ed Robinson
> Center for Tropical and Emerging Global Diseases
> University of Georgia, Athens, GA 30602
> ero...@ug.../(706)542.1447/254.8883

------ End of Forwarded Message