Apply user rights to database for an application

Hi Andre,

There are two scripts which can be created. The first one to apply the database roles and one to link users to the roles. For two applications which use the same model, it makes sense that the script to create the database roles are identical. After all, they use the same model and contain the same roles.

The second script applies user rights to the previously created roles on the database. This should be different per application. It should also start off with a section which drops the current role members and obsolete users.

Note that both scripts assume exclusive control of an application over the database. Two applications with the same database but different models will not work for the first script. Two applications using the same database will not work for the second script.

Hi Anne, 

The first script generating the role rights is ok! The second script generates the same output for two different applications of one user group, although the assigned roles for each application is different. Only the database name on top of the script is different. 

So it looks like assigning role members (for each database) is not in the context of an application.