If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
Go Back  dBforums > General > Database Concepts & Design > Question about users

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 05-10-07, 08:29
XDC XDC is offline
Registered User
 
Join Date: Sep 2006
Posts: 19
Question about users

I have to create some users for scripters, data entries, etc. And from each area, they all have to work united for the same goal. Now my question is: should I create one user for each person or one for each area? There are max 3-4 persons in each area.

Thanks
Reply With Quote
  #2 (permalink)  
Old 05-10-07, 09:17
gvee gvee is offline
www.gvee.co.uk
 
Join Date: Jan 2007
Location: UK
Posts: 10,156
I don't think you have explained your problem well enough...
But here's my suggestion

Users(UserID, GroupID UserName, Password ... etc ...)
Groups(GroupID, GroupName ... etc ...)

That's suggesting that one user can be in ONE group.
__________________
George
Twitter | Blog
Reply With Quote
  #3 (permalink)  
Old 05-10-07, 09:25
healdem healdem is offline
Jaded Developer
 
Join Date: Nov 2004
Location: out on a limb
Posts: 9,246
No a user is a user

An individual may have one or more role in the db. for example a user may have clearance to look at data, but not change it,

a user may have rights to change normal data, but view masterfile data.

a system administrator may have rights to view data but not change it.

a system operator may have rights to run reports nut not data viewing or modification

but those are roles, you may have multiple system operators.

a person may move roles within the organisation, for example (someone with masterfiels cleaerance will probably also have normal data clearance.

By assigning security policies to roles, and users to roles you have a way of allowing a specific user to have the permissions they need to do their work, you have the granularity to allocate permissions as required, and the flexibility without a significant maintenance task

someone may move from accounts receivable to accounts payable, and you may decide to switch the roles that person is entitled to use. so if you had a user role / group for each tack moving the user is simple. if you allocate permissions at user level then you have to have a lot more knowledge about the application(s) that user used to use, and now is expected to use. One of the practical problems in implementing security is often remembering to remove permissions form users as they move through an organisaiton.
__________________
I'd rather be riding my Versys or my Tiger 800 let alone the Norton
Reply With Quote
  #4 (permalink)  
Old 05-10-07, 09:26
gvee gvee is offline
www.gvee.co.uk
 
Join Date: Jan 2007
Location: UK
Posts: 10,156
Sorry, I assumed this was a question about data modelling, my bad
__________________
George
Twitter | Blog
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On