[Loris-dev] Additional users, loris admin

[Christine Rogers]

Hi Ioannis,

For multiple admins modifying the database back-end, we recommend making
database "patch" files - typically several MySQL commands compiled in a
single file - which can be reviewed and executed by a senior admin.
These database patches can be committed in a github repo so that your
project keeps a central record of them. We find this helps with
transparency and trouble-shooting, in addition to giving additional
oversight and allowing you to replicate a database configuration easily.
Best practices also include creating and committing an additional "undo"
patch alongside every database patch.

If it's truly necessary to give both admins access to the same MySQL
back-end, the setup you suggested is fine.
As with any MySQL database, there's no real "undo" feature, and there
shouldn't be any problem with 2 users logged in at the time, though
coordinating to avoid modifying the same records/tables at the same time is
probably a good idea.
Best,
Christine


On Mon, Sep 14, 2020 at 1:32 PM Ioannis Pappas <ioannis at berkeley.edu> wrote:

> Dear Loris support.
> I hope this finds you well.
>
> I would like to ask you a question about creating and managing additional
> users.
>
> We would like to add a research assistant to help us with our project,
> specifically with the loris *mysql* operations. We already have a
> lorismysql user that handles parts of the operations but we would like to
> add another person to handle the day to day operations.
>
> What is the best way for the loris admin to do so? Should we create
> another lorisdbuser with basic rights granted e.g. (like in the website):
>
> GRANT ALTER, DROP, CREATE, UPDATE, INSERT, SELECT, DELETE, CREATE
> TEMPORARY TABLES, LOCK TABLES  on $dbname.* to ‘lorisdbuser'@'$dbhost' IDENTIFIED
> BY '$newpassword' WITH GRANT OPTION ;
>
> If this is the case can the loris admin check logs or undo changes made by
> a particular user? Are there problems if two loris users are signed in the
> same time?
>
> Best wishes,
> Ioannis
> _______________________________________________
> Loris-dev mailing list
> Loris-dev at bic.mni.mcgill.ca
> https://mailman.bic.mni.mcgill.ca/mailman/listinfo/loris-dev
>


-- 

christine.rogers at mcgill.ca
McGill Centre for Integrative Neuroscience | MCIN.ca
Montreal Neurological Institute
McGill University | Montreal | Canada
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.bic.mni.mcgill.ca/pipermail/loris-dev/attachments/20200914/3bf67ee1/attachment.html>