|
|
Idents
An ident is an authorization-id used to identify users, programs and groups. There are four types of idents in a Mimer SQL database:
USER,OS_USER,PROGRAM, andGROUPidents.USER Idents
USERidents identify individual users who can connect to a Mimer SQL database.A
USER's access to the database is protected by a password and is restricted by the specific privileges granted to the ident.USERidents are generally associated with specific physical individuals who are authorized to use the system.OS_USER Idents
OS_USERidents are idents which reflect a user id defined by the operating system.An
OS_USERident allows the user currently logged in to the operating system to access the Mimer SQL database without providing a user name or password.For example: if the current operating system user is
ALBERTand there is anOS_USERident calledALBERTdefined in Mimer SQL,ALBERTmay start Mimer BSQL (for example) and connect directly to Mimer SQL simply by pressing <return> at theUsername:prompt.If an
OS_USERident is defined with a password in Mimer SQL, the ident may also connect to Mimer SQL in the same way as aUSERident (i.e. by providing the user name and password). AnOS_USERident may not have the same name as aUSERident in the database.PROGRAM Idents
PROGRAMidents can be used by an application for effective administration of access rights and authorization control.
PROGRAMidents do not strictly connect to Mimer SQL, but they may be entered from within an application program by using theENTERstatement.The
ENTERstatement may only be used by an ident who is already connected to a Mimer SQL database.An ident is granted the privilege to enter a
PROGRAMident. APROGRAMident is set up to have certain privileges and these apply after theENTERstatement has been used.PROGRAMidents are generally associated with specific functions within the system, rather than with physical individuals.The
LEAVEstatement is used to return to the state of privileges and database access that existed beforePROGRAMwas used.GROUP Idents
GROUPidents are collective identities used to define groups of user and/or program idents.Any privileges granted to or revoked from a
GROUPident automatically apply to all members of the group. Any ident can be a member of as many groups as required, and a group can include any number of members.
GROUPidents provide a facility for organizing the privilege structure in the database system. All idents are automatically members of the groupPUBLIC. When a privilege is granted toPUBLIC, all users receive the privilege.
|
Mimer Information Technology AB Voice: +46 18 780 92 00 Fax: +46 18 780 92 40 info@mimer.se |
|
|