database - How to define super user concept in MySQL DB for web application -
i developing application in have super user concept. super user user has access application. initial thinking in user table user id 1 super user. how safe in terms of security concern ? there other logic can use define super user ?
i have done more emphasis in coding side. implemented roles , other access permissions, need to ghost user. whenever logged in able access father of application. access shouldn't need check role conditions or access condition. possible ?
thanks.
why not work roles? make column in user table have 'superuser', 'admin', 'readonly',... or perhaps 0, 1, 2... , match constant/enumerable in code. can change super user, make multiple super users, give temporary super user rights, define other roles...
Comments
Post a Comment