There are indeed a few features that should be added, some easier than other. Not sure if other technologies implement roles as well

Create a role

Roles are similar to users and can be distinguished using the is_role column:
SELECT * FROM mysql.user WHERE is_role = 'Y';
A role has a name but no host or password
CREATE ROLE 'role_admin'
Standard grants can be assigned to roles
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE ON db_main.* TO 'role_admin'

Add roles to a user or role

Similar to adding existing object to a user. Can be a duplication of the add object screen
Roles are assigned via GRANTS but without the ON part
GRANT 'role_manager' TO 'manageruser'@'172.20.72.01';
Roles can also be assigned to other roles
GRANT 'role_admin' TO 'role_dbadmin'
A role can only re-grant if it was granted with admin option
GRANT 'role_manager' to 'role_dbadmin' WITH ADMIN OPTION;

Set default role for a user

This can be in the credentials or limitations tab
SET DEFAULT ROLE role_admin FOR 'dbadminuser'@'172.20.72.01';

ps:
Roles are already visible in the user management view, but can not be selected as roles do not have a host so the current query fails.
SHOW GRANTS FOR 'role_admin'

Uh oh!

Role Managment #1155

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions