Jan-08-2025, 07:17 AM
I have come at a point where more users want to retrieve data from my Mariadb server database. Locally, not internet.
I will have to replace my extremely simple user-login system with something more secure and solid.
The problem:
Users want to log into the search program with a username (given and controlled by me)
Because of gdpr a username is allowed to query some tables, but not others.
Also i want them to log in with their username only, the pw should be stored in the search program, a class or an ini file?
The simplest username would be "GUEST", and given to many people, with a standard view of the tables.
Obviously all user-pw combinations are created in Mariadb.
I can give "grants" (=privileges) to usernames inside Mariadb, but that is a hassle. I can manage it better programmatically inside the search program (or class).
I'm not looking for code, just for a direction to go. Preferably KISS.
Thx,
Paul
I will have to replace my extremely simple user-login system with something more secure and solid.
The problem:
Users want to log into the search program with a username (given and controlled by me)
Because of gdpr a username is allowed to query some tables, but not others.
Also i want them to log in with their username only, the pw should be stored in the search program, a class or an ini file?
The simplest username would be "GUEST", and given to many people, with a standard view of the tables.
Obviously all user-pw combinations are created in Mariadb.
I can give "grants" (=privileges) to usernames inside Mariadb, but that is a hassle. I can manage it better programmatically inside the search program (or class).
I'm not looking for code, just for a direction to go. Preferably KISS.
Thx,
Paul
It is more important to do the right thing, than to do the thing right.(P.Drucker)
Better is the enemy of good. (Montesquieu) = French version for 'kiss'.
Better is the enemy of good. (Montesquieu) = French version for 'kiss'.