Grant access to mysql project

[robin.perice]

Hello everybody,

I have an enterprise architect license for 5 users. As mysql root I transfered my project in mysql (using this http://www.sparxsystems.com/enterprise_architect_user_guide/10/projects_and_teams/upsizingtomysql.html).

What is the easier way to grant access to my users to this project (without giving them root password of the database of course) ?

Best Regards,

Robin

[qwerty]

Create an EA user and grant access to the repository. You need R/W/D to all table contents but they must not modify the table structures.

q.

[robin.perice]

Ok so I just created an EA user that can DELETE/INSERT/UPDATE on my repo database. Connection test works fine but when I try to open the project I have this message "There does not appear to be a model in these repository. Do you wish to transfer a model to the repository ?".

When I try the same with my database root user everything works fine.

What's the problem ? (seems to be a mysql privilege problem).

Best Regards,
Robin

[Geert Bellekens]

Robin,

You forgot READ I suppose.

The easiest way to give access is to create a project shortcut file.
In case you decide to use a single database user you can encrypt the file so that the password it isn't stored in plain text in the shortcut file.

Check File|Save as Shortcut...

Geert

[robin.perice]

Ok I add SELECT privilege and now it works great !

I created a shorcut but users will need the ODBC connector file, I can export the file and share it to my users so they don't have to create the connector in EA. Is this the easier way or I'm missing something ?

Thanks for your help !
Best Regards,
Robin

[Geert Bellekens]

For SQL Server you don't need an ODBC DSN, but I'm not sure how that works with MySQL.

Geert

[qwerty]

There are a couple of drivers for MySQL. Check the Sparx resource page for which is supported. Also when I used it there were some settings you needed to tweak.

q.

[robin.perice]

I used MySQL ODBC 5.3 Unicode Driver and it works fine but my users need to know the password of the "EA" user (user that can use my repo database) to create the connector. There is any way to let my users use the project without giving them the EA user password ?

Robin.

[Geert Bellekens]

You should be able to store the password in the eap shortcut file.

Geert

[qwerty]

I used MySQL ODBC 5.3 Unicode Driver and it works fine but my users need to know the password of the "EA" user (user that can use my repo database) to create the connector. There is any way to let my users use the project without giving them the EA user password ?

Robin.

Well, they need to access the repository and they need to know the user. So give them user and password. Where is the problem?

IANADBA but doesn't MySQL allow to use AD for authorization?

q.

[Geert Bellekens]

qwerty,

The problem with that is that they could access the database directly, whereas otherwise they can only use EA to access the database.

I have a preference for using AD authentication as well, but I've seen setups like this before (just not with MySQL).
For SQL Server you can choose to use a dedicated user, or use AD authentication. If you choose the dedicated user (and you check the option to store the password) then the password will be stored in the shortcut .eap file.
If you don't tell EA to encrypt the file, the password will be stored in plain text together with the rest of the connection string.

Geert

[qwerty]

The problem with that is that they could access the database directly, whereas otherwise they can only use EA to access the database.

Well, you know that an EA user needs the full blown access. And it does not matter whether you use EA or a client. Both are open wide and evil can come in. But we're not living in a bad world when dealing with our repository. People accessing it are not supposed to mess it up, though they would be able to do so And in any case we always have a good backup 8-)

q.