permissions editor GUI

[brettatoms]

Create an interface for working with user/group permissions on a database. Should at least work with Postgres and MySQL.

[Shane Litherland (litherland-farm-deactivatedaccount)]

See this is an old bug, but in event it is still relevant:
I use Postgres, and the GUI pgAdmin to work with it. That may provide some examples/ideas of how to have an interface. HOWEVER, I still find limitations, because under pgAdmin, just like Bauble, I have to connect to a particular database as a particular user. That user may have access/permissions already defined in postgres, which cannot be changed unless that database is accessed by the database owner or super-user.
For example, I note on my setup, the owner of the Bauble database 'baubledb' is the user/login I have on my computer for doing office tasks. That is because the 'baubledb' had to be created in postgres, before Bauble could even be connected to it. So, if Bauble was connected to this db by another user, no amount of interface/begging/pleading from Bauble would allow db permission changes unless the owner had already set up the db to allow that. e.g. if the db was owned by my_user with only 'grant read to public' then another Bauble user could only ever read it. (have I got this right?)

Another approach - that postgres et al has a group 'Bauble' added, and all users of Bauble are automatically assigned to this group, and any Bauble db's are made with privileges granted to group 'bauble'. So no matter which user connects, Bauble db privileges are consistent. of course, can still limit some of the group privileges so that really important stuff can only be done by db admin.

-Doesn't really answer original issue though. Maybe best answer is 'create button that launches someone else's interface like pgAdmin and save yourself the headache' :-)