User-based Authorization

simple_user_policy is an Authorization plugin that only allows users to access schemas with their exact name. For example, user “robert” can only access schema “robert”. User “root” can access all schemas. The plugin does not require a policy file or any configuration; the policiy is as simple as described here.

Loading

To load this plugin, start drizzled with:

--plugin-add=simple_user_policy

See also

Plugin Options for more information about adding and removing plugins.

Configuration

These command line options configure the plugin when drizzled is started. See Command Line Options for more information about specifying command line options.

--simple-user-policy.remap-dot-to ARG

Default:

‘.’

Since using a period (dot) in a schema name requires quoting, we support remapping this to another character. When set to an underscore, this enables user ‘first.last’ to connect to the ‘first_last’ schema, a schema name which does not require quoting.

Examples

Authors

Monty Taylor, Stewart Smith

Version

This documentation applies to simple_user_policy 1.0.

To see which version of the plugin a Drizzle server is running, execute:

SELECT MODULE_VERSION FROM DATA_DICTIONARY.MODULES WHERE MODULE_NAME='simple_user_policy'

Changelog

v1.1

• Added remap-dot-to option.

v1.0

• First release.