Re: Design pattern for row-level security?

[rob@xxxxxxxxx]

I am thinking that the only way to do this is with a trigger.

Rob Berendt
-- 
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety." 
Benjamin Franklin 




"Walden H. Leverich III" <WaldenL@xxxxxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
05/02/2003 01:44 PM
Please respond to Midrange Systems Technical Discussion
 
        To:     "'midrange-l@xxxxxxxxxxxx'" <midrange-l@xxxxxxxxxxxx>
        cc: 
        Fax to: 
        Subject:        Design pattern for row-level security?


Has anyone implemented a system that supports row-level security? By
row-level I'm speaking of a system where you could say:

Mike can add comments to items.
Mike can change items.
Mike can NOT access item 12345 in any way (not even read)
Jane can display any item where she is the product-line manager
Jane can not display item 87997 even though she is product-line manager
Pete can edit items where he is buyer
Pete can edit item 99890 (even though he isn't buyer)
Pete can add notes to items where he is seconday buyer, but can't change
them.

Any experience or places to look for decent design patterns?

-Walden

------------
Walden H Leverich III
President
Tech Software
(516) 627-3800 x11
(208) 692-3308 eFax
WaldenL@xxxxxxxxxxxxxxx
http://www.TechSoftInc.com 

Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)
 
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo.cgi/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.