Re: [Gnumed-devel] Managing staff (user accounts)

[Jim Busser]

On 2011-05-25, at 4:19 AM, Karsten Hilbert wrote:

>> 4) is gm-logins a postgres group
> 
> Yes.


hmm…

1) gm-dbo is

        a postgres user?

2) any-doc, jaki… are also

        postgres users ?

3) it is the postgres groups -- of which distinct users either are, or are not, 
made members -- that allows postgres to control database & table access as a 
layer of control and protection no matter what the gnumed app (or a local user 
who would alter the app) would try to achieve?

4) separately, GNUmed (in its table values) defines staff accounts, and it is 
the association of

        postgres user <--> gnumed staff account (if one exists and is 
associated)

        that determines whether the GNUmed app will allow the user to (for 
example) login to the app?

        --> thereby allowing two levels of control of access (or in one case, 
ease of access) to information?

5) lastly, GNUmed doesn't allow a gnumed staff account to exist without an 
associated postgres user, does it?