ajout des roles et users
This commit is contained in:
parent
840d285b2c
commit
1649649a0b
2
.gitignore
vendored
2
.gitignore
vendored
@ -16,3 +16,5 @@
|
|||||||
*.swp
|
*.swp
|
||||||
|
|
||||||
**/~$*.xlsx
|
**/~$*.xlsx
|
||||||
|
**/~$*.docx
|
||||||
|
|
||||||
|
|||||||
152
README.md
152
README.md
@ -457,56 +457,124 @@ Records: 0 Duplicates: 0 Warnings: 0
|
|||||||
|
|
||||||
## Utilisateurs et rôles
|
## Utilisateurs et rôles
|
||||||
|
|
||||||
##### Création des rôles
|
### Administrateur
|
||||||
|
|
||||||
|
##### Creation du rôle
|
||||||
```sql
|
```sql
|
||||||
CREATE ROLE 'administarteur';
|
CREATE ROLE 'role_administarteur'@'localhost';
|
||||||
CREATE ROLE 'gestionnaire_vols';
|
|
||||||
CREATE ROLE 'agent_reservation';
|
|
||||||
CREATE ROLE 'agent_comptoir';
|
|
||||||
CREATE ROLE 'analyste';
|
|
||||||
```
|
```
|
||||||
|
|
||||||
|
##### Assignation des permissions
|
||||||
```sql
|
```sql
|
||||||
-- 1. Administrateur: Contrôle total [cite: 184]
|
GRANT ALL PRIVILEGES ON db_aeroport.* TO 'role_administrateur'@'localhost' WITH GRANT OPTION;
|
||||||
GRANT ALL PRIVILEGES ON db_aeroport.* TO 'administrateur'@'localhost' WITH GRANT OPTION;
|
|
||||||
|
|
||||||
-- 2. Gestionnaire des Vols: Ajout/modif vols et programmes [cite: 192, 195-197]
|
|
||||||
GRANT INSERT, UPDATE ON db_aeroport.t_vol TO 'role_flight_manager'@'localhost';
|
|
||||||
GRANT INSERT, UPDATE ON db_aeroport.t_programme_vol TO 'role_flight_manager'@'localhost';
|
|
||||||
GRANT SELECT ON db_aeroport.t_avion TO 'role_flight_manager'@'localhost';
|
|
||||||
|
|
||||||
-- 3. Agent de Réservation: Gère passagers et réservations [cite: 199-204]
|
|
||||||
GRANT INSERT ON db_aeroport.t_passager TO 'role_booking_agent'@'localhost';
|
|
||||||
GRANT INSERT, UPDATE ON db_aeroport.t_reservation TO 'role_booking_agent'@'localhost';
|
|
||||||
-- Droits de lecture nécessaires pour travailler :
|
|
||||||
GRANT SELECT ON db_aeroport.t_passager TO 'role_booking_agent'@'localhost';
|
|
||||||
GRANT SELECT ON db_aeroport.t_vol TO 'role_booking_agent'@'localhost';
|
|
||||||
|
|
||||||
-- 4. Agent de Comptoir: Vérifie réservations, modifie siège [cite: 206-210]
|
|
||||||
GRANT SELECT ON db_aeroport.t_reservation TO 'role_counter_agent'@'localhost';
|
|
||||||
GRANT SELECT ON db_aeroport.t_passager TO 'role_counter_agent'@'localhost';
|
|
||||||
GRANT SELECT ON db_aeroport.t_vol TO 'role_counter_agent'@'localhost';
|
|
||||||
GRANT UPDATE (siege) ON db_aeroport.t_reservation TO 'role_counter_agent'@'localhost';
|
|
||||||
|
|
||||||
-- 5. Analyste: Lecture seule sur tout [cite: 216, 222]
|
|
||||||
GRANT SELECT ON db_aeroport.* TO 'role_analyst'@'localhost';
|
|
||||||
```
|
```
|
||||||
|
|
||||||
##### Création des utilisateurs et assignation des rôles
|
##### Création de l'utilisateur
|
||||||
```sql
|
```sql
|
||||||
-- Création des utilisateurs
|
CREATE USER 'administrateur'@'localhost' IDENTIFIED BY 'administateur';
|
||||||
CREATE USER 'usr_admin'@'localhost' IDENTIFIED BY 'P@sswordAdmin123';
|
```
|
||||||
CREATE USER 'usr_flight_manager'@'localhost' IDENTIFIED BY 'P@sswordFlight123';
|
|
||||||
CREATE USER 'usr_booking_agent'@'localhost' IDENTIFIED BY 'P@sswordBooking123';
|
##### Assignation du rôle à l'utilisateur
|
||||||
CREATE USER 'usr_counter_agent'@'localhost' IDENTIFIED BY 'P@sswordCounter123';
|
```sql
|
||||||
CREATE USER 'usr_analyst'@'localhost' IDENTIFIED BY 'P@sswordAnalyst123';
|
GRANT 'role_admininistateur'@'localhost' TO 'administrateur'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
### Gestionnaire de vols
|
||||||
|
|
||||||
|
##### Creation du rôle
|
||||||
|
```sql
|
||||||
|
CREATE ROLE 'role_gestionnaire_vols'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation des permissions
|
||||||
|
```sql
|
||||||
|
GRANT INSERT, UPDATE ON db_aeroport.t_vol TO 'role_geastionnaire_vols'@'localhost';
|
||||||
|
GRANT INSERT, UPDATE ON db_aeroport.t_programme_vol TO 'role_geastionnaire_vols'@'localhost';
|
||||||
|
GRANT SELECT ON db_aeroport.t_avion TO 'role_gestionnaire_vols'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Création de l'utilisateur
|
||||||
|
```sql
|
||||||
|
CREATE USER 'gestionnaire_vols'@'localhost' IDENTIFIED BY 'gestionnaire_vols';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation du rôle à l'utilisateur
|
||||||
|
```sql
|
||||||
|
GRANT 'role_gestionnaire_vols'@'localhost' TO 'gestionnaire_vols'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
### Agent de réservation
|
||||||
|
|
||||||
|
##### Creation du rôle
|
||||||
|
```sql
|
||||||
|
CREATE ROLE 'role_agent_reservation'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation des permissions
|
||||||
|
```sql
|
||||||
|
GRANT INSERT ON db_aeroport.t_passager TO 'role_agent_reservation'@'localhost';
|
||||||
|
GRANT INSERT, UPDATE ON db_aeroport.t_reservation TO 'role_agent_reservation'@'localhost';
|
||||||
|
GRANT SELECT ON db_aeroport.t_passager TO 'role_agent_reservation'@'localhost';
|
||||||
|
GRANT SELECT ON db_aeroport.t_vol TO 'role_agent_reservation'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Création de l'utilisateur
|
||||||
|
```sql
|
||||||
|
CREATE USER 'agent_reservation'@'localhost' IDENTIFIED BY 'agent_reservation';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation du rôle à l'utilisateur
|
||||||
|
```sql
|
||||||
|
```
|
||||||
|
|
||||||
|
### Agent de comptoir
|
||||||
|
|
||||||
|
##### Creation du rôle
|
||||||
|
```sql
|
||||||
|
CREATE ROLE 'role_agent_comptoir'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation des permissions
|
||||||
|
```sql
|
||||||
|
GRANT SELECT ON db_aeroport.t_reservation TO 'role_agent_comptoir'@'localhost';
|
||||||
|
GRANT SELECT ON db_aeroport.t_passager TO 'role_agent_comptoir'@'localhost';
|
||||||
|
GRANT SELECT ON db_aeroport.t_vol TO 'role_agent_comptoir'@'localhost';
|
||||||
|
GRANT UPDATE (siege) ON db_aeroport.t_reservation TO 'role_agent_comptoir'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Création de l'utilisateur
|
||||||
|
```sql
|
||||||
|
CREATE USER 'agent_comptoir'@'localhost' IDENTIFIED BY 'agent_comptoir';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation du rôle à l'utilisateur
|
||||||
|
```sql
|
||||||
|
GRANT 'role_agent_comptoir'@'localhost' TO 'agent_comptoir'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
### Analyste
|
||||||
|
|
||||||
|
##### Creation du rôle
|
||||||
|
```sql
|
||||||
|
CREATE ROLE 'role_analyste'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation des permissions
|
||||||
|
```sql
|
||||||
|
GRANT SELECT ON db_aeroport.* TO 'role_analyste'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Création de l'utilisateur
|
||||||
|
```sql
|
||||||
|
CREATE USER 'analyste'@'localhost' IDENTIFIED BY 'analyste';
|
||||||
|
```
|
||||||
|
|
||||||
|
##### Assignation du rôle à l'utilisateur
|
||||||
|
```sql
|
||||||
|
GRANT 'role_analyste'@'localhost' TO 'usr_analyste'@'localhost';
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
-- Assignation des rôles
|
|
||||||
GRANT 'role_admin'@'localhost' TO 'usr_admin'@'localhost';
|
|
||||||
GRANT 'role_flight_manager'@'localhost' TO 'usr_flight_manager'@'localhost';
|
|
||||||
GRANT 'role_booking_agent'@'localhost' TO 'usr_booking_agent'@'localhost';
|
|
||||||
GRANT 'role_counter_agent'@'localhost' TO 'usr_counter_agent'@'localhost';
|
|
||||||
GRANT 'role_analyst'@'localhost' TO 'usr_analyst'@'localhost';
|
|
||||||
|
|
||||||
-- Activer les rôles par défaut
|
-- Activer les rôles par défaut
|
||||||
SET DEFAULT ROLE ALL TO
|
SET DEFAULT ROLE ALL TO
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user