SQL Queries - CAST Knowledge Base - How to give access in CSS to only a single local base for use by enlighten

Purpose of Query

This page provides queries that can be run on CSS (postgres) that will enable access to only a single local base for use by enlighten. The operator CSS user has too many permissions and privileges to provide to a person who should only have limited access to Enlighten.

The user credentials created with these special permissions can then be given to people who should only have limited access to CAST databases and should only have access to Enlighten on specific knowledge bases. 

Applicable CAST Version
Release
Yes/No
8.3.x(tick)
8.2.x(tick)
8.1.x(tick)
8.0.x(tick)
Applicable RDBMS
RDBMS
Yes/No
Oracle Server(error)
Microsoft SQL Server(error)
CSS2(tick)
CSS3 (tick)
Query for CSS

The below sample commands should be run by a postgres administrator user in the pgadmin tool. In this example a user named euser will be created with a password 'cast' and access only to the test_local schema. The commands should be modified for the specific user that is desired to be created (in the example below, replace euser with the actual user name), as well as for the specific schema the user should have access to (in the example below, replace test_local which the actual local schema).

CREATE USER euser WITH LOGIN NOSUPERUSER PASSWORD 'cast';
GRANT ALL PRIVILEGES ON schema test_local TO euser;
GRANT usage ON schema test_local TO euser;
GRANT ALL ON schema test_local TO euser;
GRANT ALL ON ALL tables    IN schema test_local TO euser;
GRANT ALL ON ALL sequences IN schema test_local TO euser;
GRANT ALL ON ALL functions IN schema test_local TO euser;

The queries will return with a simple indication of success or failure.

Once run then a connection profile for enlighten will need to be created with this user as shown in the below screenshot for the sample euser:

 

Notes/comments
 
Related Pages