🚀 go-pugleaf

On Thu, 11 Oct 2001 11:48:00 -0300, "Landim" <landim2@terra.com.br>
wrote:
>
>All you have to do is insert if there is name, right?  So the idea is...
>
>insert on scratchpad (myrow) values (myvalues) where (select * from
>scratchpad where admin = "var");
>
>                                                                        BUT
>insert does not accept where ...
>
>so you can make a transaction or try mask(filter,restriction) options of the
>row you are using...
>
>
>landim2@terra.com.br
>
>

I can use the filters, and programatically allow inserts, edits,
deletes from withing the program using sql and filters and such but I
was wondering if someone with a "real" login/password AND has or built
their own database tool can access the database and insert/edit/delete
records of other rows that have a different admin name.

I'm thinking this has to be done at database level.  Do you know if
this can be done with mysql?

Specifically:
User name "test1" should be able to insert/edit/delete records with
his user name in the admin field.

User name "test2" should not be able to do anything to the rows with
"test1" in the admin field.

Reynold


---
Reynold M. de Guzman
deguzman@offworldcolony.com