Creation of DB specific roles

[3nids]

If one has several DB instances of a module, the roles defined in the module config will be the same across all the DBs (in the same cluster).

We could add an option to create DB specific roles, by appending (or prepending) the name of the DB to the role name.

[3nids]

Management of the roles would happen here (under the roles groupbox):

I think it would deserve its own dialog.

In the dialog, there would be 2 things:

• a list of roles having access to the given DB.
  The ones that match the definition of the config would be highlighted and marked as corresponding (e.e. tww_lausanne_user would be flagged as tww_user)(1)

• the button to create and grant roles with an option to customize the role names (prefix, suffix, or custom)

Potential follow-up: more advanced roles management: dropping, regranting, etc.

(1) I am not sure if this it totally feasible, but it would be interesting to try.

[cymed]

I feel like a separate dialogue makes sense.
However, I would keep it simple:

• One option to define a suffix (it makes it much more manageable long-term from a support perspective)
• One option have the generic role inherit from the specific one (True per default)

[3nids]

+1 for the suffix

So basically you would create tww_XXXX_lausanne for lausanne DB, and have tww_XXXX inherit from tww_XXX_lausanne, correct? And you would replicate this.

So, we could simplify to these choices:

• create specific role(s) with suffix [------]
• create generic role(s)
  • grant generic role(s) to specific role(s)

Does this make sense?

[3nids]

@cymed @ponceta implemented at opengisch/oqtopus#159