Setting application users permissions on specific records.

[nokia33948]

Hi there,
I am writing a VB.NET 2005 application that connects to an MySQL DB
(it could be MS SQL, one day...). One of the window forms contains a
gridview with some rows coming from a table on the DB, basically,
phisical addresses of contacts. I would like to implement a system to
grant/deny read/write permissions on specific rows, so that if the
user, after the log in, has got the necessay privileges he actually
can see/modify some rows, if he hasn't the rows will not even be shown
to him.

I can't think of an easy way to implement that, considering also that
I would like to set persmissions also at group (of users) level.

Any idea would be appreciated.

Regards,
D.

[Chris Dunaway]

On Apr 23, 3:14 am, nokia33948 <[e-mail]:

Hi there,
I am writing a VB.NET 2005 application that connects to an MySQL DB
(it could be MS SQL, one day...). One of the window forms contains a
gridview with some rows coming from a table on the DB, basically,
phisical addresses of contacts. I would like to implement a system to
grant/deny read/write permissions on specific rows, so that if the
user, after the log in, has got the necessay privileges he actually
can see/modify some rows, if he hasn't the rows will not even be shown
to him.

I can't think of an easy way to implement that, considering also that
I would like to set persmissions also at group (of users) level.

Any idea would be appreciated.

Regards,
D.

I don't know very much about MySql, but if I were using Sql Server, I
would create a View that selected just the rows needed and then set
permissions on the view as appropriate and then deny permissions on
the table itself. The queries would all query the view. I don't know
if MySql supports views or not, but that is the easiest way I know to
do it.

Chris

[nokia33948]

On 23 Apr, 18:01, Chris Dunaway <[e-mail]:

I don't know very much about MySql, but if I were using Sql Server, I
would create a View that selected just the rows needed and then set
permissions on the view as appropriate and then deny permissions on
the table itself. *The queries would all query the view. *I don't know
if MySql supports views or not, but that is the easiest way I know to
do it.

Chris-

Hi Chris,
thank you for your interested: mySQL supports views, almost the same
way as SQL Server; but how could I tell the system that user A can see
row 1 and 3, user B can see all the rows (1,2,3), user C cannot see
any?

Regards,
D.

[Chris Dunaway]

On Apr 23, 11:41 am, nokia33948 <[e-mail]:

On 23 Apr, 18:01, Chris Dunaway <[e-mail]:

I don't know very much about MySql, but if I were using Sql Server, I
would create a View that selected just the rows needed and then set
permissions on the view as appropriate and then deny permissions on
the table itself. The queries would all query the view. I don't know
if MySql supports views or not, but that is the easiest way I know to
do it.

Chris-

Hi Chris,
thank you for your interested: mySQL supports views, almost the same
way as SQL Server; but how could I tell the system that user A can see
row 1 and 3, user B can see all the rows (1,2,3), user C cannot see
any?

Regards,
D.

Create one view that selects rows 1 and 3 and grant user A permission
to query from that view, create another view that selects all the rows
and grant user B permission to query from that view. Deny all users
permissions on the table and force them to query the views only. User
C will not be able to see any because she can't access either of the
views or the table.

Chris

[nokia33948]

On 23 Apr, 21:28, Chris Dunaway <[e-mail]:

Create one view that selects rows 1 and 3 and grant user A permission
to query from that view, create another view that selects all the rows
and grant user B permission to query from that view. *Deny all users
permissions on the table and force them to query the views only. *User
C will not be able to see any because she can't access either of the
views or the table.

Chris- Nascondi testo tra virgolette -

- Mostra testo tra virgolette -

Hi Chris,
as I wrote to Lloyd, I have got been suggested to add a field "Role"
to each row to determine which user can see that row and which one
cannot. Then the stored procedure retrieving the data will filter on
the "Role" field. What do you think?

Regards,
D.