Hi Andreas,

well my first thought for this was :

- to extend the property window of a grouprole by a new tab called
'members of this role'
- in this new tab integrate a treectrl which contains all direct member
(roles) and if an item is a role with sub-members go down to the next
recursive level

e.g.

- / root <name-of-current-group>
|
| - loginrole1 ( without member )
| - loginrole2 ( without member )
| - loginrole3 ( with member )
|
| - loginrole4 (without member )
| - grouprole_a ( with member )
|
| -- ...


and so on

From my point of view it'll not necessary ( or not a highpriority item )
to modify the underlying data from within this "new tab".

(An other solution could be a simple reporting solution to get a list of
people who have access to a certain object.)

regards

Tom





Andreas Pflug <pgadmin@pse-consulting.de>
10.11.2005 14:51


An: Tom.Zschockelt@flender.com
Kopie: pgadmin-support@postgresql.org
Thema: Re: [pgadmin-support] group role membership


Tom.Zschockelt@flender.com wrote:
> Hi,
>
> with postgres 8.1 and pgadmin 1.4.0 I found no way ( except a select on
> pg_catalog-tables ) to
> get a list of all members belonging to certain group role.
>
> The other way around works ( all assigned roles to a certain role).

This isn't implemented yet; it will require an additional tab "members".

> If we use group roles to manage access to objects it would be neccessary

> to get a list of all
> login-roles that are able to do e.g. a select .
>
> It would be nice if an solution will step through all recursive level (
> e.g. if a login-role is member of a group-role which is member of a
> group-role itself, ... ).

Please make a proposal how this should look like concretely, and how it
should be controlled (context menu on object, property or so?).

Regards,
Andreas





---------------------------(end of broadcast)---------------------------
TIP 5: don't forget to increase your free space map settings

Tom.Zschockelt@flender.com wrote:
> Hi Andreas,
>
> well my first thought for this was :
>
> - to extend the property window of a grouprole by a new tab called
> 'members of this role'
> - in this new tab integrate a treectrl which contains all direct member
> (roles) and if an item is a role with sub-members go down to the next
> recursive level
>
> e.g.
>
> - / root <name-of-current-group>
> |
> | - loginrole1 ( without member )
> | - loginrole2 ( without member )
> | - loginrole3 ( with member )
> |
> | - loginrole4 (without member )
> | - grouprole_a ( with member )
> |
> | -- ...
>
>
> and so on
>
> From my point of view it'll not necessary ( or not a highpriority item )
> to modify the underlying data from within this "new tab".

This is possible for <=8.0 groups, and it's a common task to assign a
bunch of users to a new group/role, so I'm inclined not to agree.
>
> (An other solution could be a simple reporting solution to get a list of
> people who have access to a certain object.)

An additional "who has which rights on this object" dialog from context
menu?

Regards,
Andreas

---------------------------(end of broadcast)---------------------------
TIP 5: don't forget to increase your free space map settings