Re: draft Re: [Gnumed-devel] Managing users: restricting access within GNUmed

[Karsten Hilbert]

On Fri, Aug 07, 2009 at 07:07:04AM -0700, Jim Busser wrote:

> Would the logged-in identity (person) require a different [userid?]
> and password

Each role needs a database account (dem.staff.db_user).

> dbo). Therefore if their role exists there must exist a db_user.

The table constraints make sure that no role can be linked
to an identity unless there is a unique db_user for that
identity to use with that role.

> If a user is required to work under only one role at any one time,
> when the user would logon with their userid and password, maybe they
> could select from a listing the role that they intend to serve.

The role is already restricted to the one set in dem.staff
by the database account used for logging in.

Karsten
-- 
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346