Assumptions for user role #130
Replies: 3 comments
-
Note that I'm not assuming the installing user has privileges to install anything on the underlying server. For example, in Amazon Web Service's RDS managed DBs, a user can use the |
Beta Was this translation helpful? Give feedback.
-
Correcting myself from above: For the |
Beta Was this translation helpful? Give feedback.
-
@kgodey 's comment, copied from #128 :
|
Beta Was this translation helpful? Give feedback.
-
In order to make sure we're all operating under the same assumptions, we need to specify precisely what privileges a user who installs Mathesar on a preexisting DB can be expected to have. (and what modifications to their DB they should be willing to make). I think that a necessary (maybe not sufficient) set of privileges (
ROLE
s) would be the rights to run:CREATE SCHEMA
in some database to create a schema for mathesar functions and types, and other schemata for mathesar tablesCREATE FUNCTION
(in the schema for mathesar functions/types)CREATE DATABASE
(to create the DB for Django tables)CREATE TYPE
(in the function/type schema above)CREATE TABLE
(in the schema where mathesar tables will live)ALTER TABLE
(in the mathesar tables schema)I also think we should be able to assume they're willing to create functions and types in a separate schema (i.e., namespaced away from any functions/types they may previously have created). Without that, the functionality would be reduced to a pretty lackluster DB client that's missing a bunch of features.
Beta Was this translation helpful? Give feedback.
All reactions