User groups and their rights |
To protect information from unauthorized modification or deletion, it is recommended to differentiate access rights to data for different users. The separation of access rights to the database is in its essence similar to the differentiation of access rights in a local network.
Access to the data of software server the «Passport of the field» in the local network:
Besides roles established by default in Microsoft SQL Server 2005 for databases (public, db_owner, db_datareader, etc.), in a database of software «Passport of the field» there are preset six roles: Administrator - the administrator has the right to modify any information in a database. Has the right to add, delete and edit the list of users, to distribute them on roles. Agronomist, Economist, Dispatcher and User - the privileged user has the right to modify the information in a database depending on settings of their rights, have the limited access to data. Each role carries out the action on entering and updating information relating to the work of role. It is forbidden to change the list of users and assign roles to them. Observer - the user can access the information only for reading.. |