[Demi-devel] The much awaited database schema...

[John Morrissey]

On Thu, Mar 18, 2004 at 09:28:04AM +1000, Andrew Pollock wrote:
> I thought about having a separate table for packags and versions, but I
> didn't think the extra joining involved was worth it to reduce the data
> redundancy.

The joins should be pretty cheap, since they'll be on indexed columns and
(some of the time, at least) joined on constant values.

> With user access levels, I was really only envisaging two, maybe three at
> the most, a read-only level that could essentially just run reports and
> monitor the situation, a read-write level, that could add hosts, and
> possibly a read-write-update level, that was allowed to trigger updates on
> remote hosts (or just roll this level into the read-write level).

I'd like a separate level that only allows adding hosts; it would be very
useful in our automated install procedure without giving that automated
account too many privileges. Perhaps a bitmask-like system where a given
user could have ADD, READ, and/or WRITE/UPDATE permission bits on a given
system or group of systems?

john
--=20
John Morrissey          _o            /\         ----  __o
jwm@horde.net        _-< \_          /  \       ----  <  \,
www.horde.net/    __(_)/_(_)________/    \_______(_) /_(_)__