Luke Ehresman wrote:
> Anyone know how to set up a read-only user in Lucid? I haven't been
> able to find anything about this in the docs.
The standard way to do it is to create a new user and only grant it
SELECT privileges on the tables or views of interest.
However, the security implementation is incomplete, so that user can
still execute arbitrary DDL commands, which means you wouldn't want to
use this for anything serious until that hole is plugged.
The warehouse labels feature actually includes something close to what
you want, except it's at session-level rather than user-level, and
requires setting a label on the session:
http://pub.eigenbase.org/wiki/LucidDbWarehouseLabels#Setting_Warehouse_LabelsIt would not be a lot of work to reuse the underlying support to
introduce the notion of a read-only user.
JVS
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf_______________________________________________
luciddb-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/luciddb-users
