|
If you were logged in you would be able to see more operations.
|
|
|
|
Environment:
|
Windows platform
|
|
|
It would be very desirable to be able to grant a role to a Windows user group regrouping several individual domain/local users. This would simplify the administrative burden of granting/revoking privileges on a per domain/local user basis: e.g. GRANT MyRole TO GROUP "MyDomain\MyDomainGroup";
This is possible under Unix but not on Windows for now.
This would also provide a workaround under Windows for those "domain\USERname" strings exceeding the 31 characters limitation in Firebird. The workaround would consist in creating a "domain\GROUPname" < 31 characters which could regroup "domain\USERname" > 31 characters.
Thanks.
|
|
Description
|
It would be very desirable to be able to grant a role to a Windows user group regrouping several individual domain/local users. This would simplify the administrative burden of granting/revoking privileges on a per domain/local user basis: e.g. GRANT MyRole TO GROUP "MyDomain\MyDomainGroup";
This is possible under Unix but not on Windows for now.
This would also provide a workaround under Windows for those "domain\USERname" strings exceeding the 31 characters limitation in Firebird. The workaround would consist in creating a "domain\GROUPname" < 31 characters which could regroup "domain\USERname" > 31 characters.
Thanks. |
Show » |
|
Improvement
Closed
Major
Windows authentication: grant privileges to Windows groups
The full syntax of new command is supposed to be:
ALTER {ROLE | USER} <name> {ADD | DROP} OS_NAME 'name'
This will make it possible to map any OS name - user, group or even host:)),
what else can be imagined in security plugin, to any database security name -
user, role, group (when/if we add them).