Hello,

Sorry for the somewhat wide distribution, first of all. (This message was originally cross-posted to cont...@lists.mysql.com; so please reply to them as well.)

Background:

I am implementing multiple websites using MySQL as a backend database. So far, nothing new. However some of these websites will host applications that are password protected and user-role authorized. Thus it would seem ideal if we could somehow manage for the website password to be the same as the database password, so that we can target specific tables / databases for specific users. One of the databases is to hold financial data, which I would not want a "role-based" user id (aka "web"/"web") to be able to see.

I *assume* that a possibility like this would greatly benefit several organizations using MySQL for similar purposes, if these organizations already have centralized password databases. Nowadays with Microsoft finally supporting Kerberos by default as the means to store Active Directory passwords, it would seem to me that a large number of organizations actually fit that bill.