How often do you wonder about the privileges a particular user has on databases, tables and stored procedures? Have you ever thought about which users have access to table ‘passwords’ in ‘livedb’? “Do all my users have a decent password?” and “When was it changed last?” are surely issues DBAs commonly think about, whilst hoping users are not cycling through the usual three passwords to avoid having to remember a new one. Maybe you have occasionally granted full access to all tables in a database to avoid the frustration of having to grant on tables one by one, or wondered about the mess your users and their privileges were in. Did you ever wish you could rename a user ’paul’@’192.168.0.189’ to ’paul’@’192.168.0.188’ or clone user’john’@’localhost’ from ’fred’@’127.0.0.1’?
Then, perhaps, Securich can come to your rescue. It can easily tackle the above and much more. Securich also enables the absent roles functionality in MySQL, permits dynamic updating of roles and immediate rollout of the changes to each user.
Securich is very simple to install and update using a bash script that includes error catching and rollback in case of problems. Securich is also easy to be remove if required, a single “drop securich” command does the trick and does not change any of the rights granted to users through it.
SAM-My is a web based, cross-platform, OS independent and lightweight application written in PHP, enabling GUI administration of users and configuration of the main parts of SECURICH.
Adding to its appeal is the fact that both Securich and SAM-My are OpenSource projects licensed under GPLv2.
Darren Cassar is a MySQL community focused engineer, blogging about MySQL-related topics such as HA, replication and security on MySQLPreacher.com. After graduating as a computer and communications engineer in 2004, he immediately shifted his career initially towards systems engineering, then onto database administration, gaining his CMDBA certification in 2008. He has developed an open source security plugin for MySQL DBAs called Securich with the aim of securing and simplifying user rights management, along with a GUI admin tool for Securich named SAM-My. Darren, a Maltese by nationality, loves to travel for both work and pleasure and is currently based in New York having previously lived and worked in Malta and London.
Comments on this page are now closed.
For information on exhibition and sponsorship opportunities at the conference, contact Yvonne Romaine at firstname.lastname@example.org
For media-related inquiries, contact Maureen Jennings at email@example.com
To stay abreast of conference news and to receive email notification when registration opens, please sign up for the O'Reilly MySQL Conference newsletter (login required).
View a complete list of O'Reilly MySQL Conference contacts.