如何使用休眠管理具有多个数据库角色（用户）的 web 应用程序？

Question

How to handle the situation where we have a Postgres database running with many database roles (representing the users) and want to use hibernate so every database statement would be executed using a connection fetched with the specific user?

To get a Session / EntityManager we need to fetch it from an EntityManagerFactory , which requires a DB user/password, usually specified in persistence.xml like this:

<property name="javax.persistence.jdbc.user" value="SYSDBA"/>
<property name="javax.persistence.jdbc.password" value="masterkey"/>

Of course i can create a Session / EntityManager for every user using a separate EntityManagerFactory , but this is a costly operation. How can this problem be solved?

Answer 1

If the RDBMS is PostgreSQL I think the best way to accomplish this would be to call the SET ROLE command. This command will change the role and permissions to whatever role is specified. It will carry out all SQL commands during the session as if you logged in with that role in the beginning.

Here is a link to the Postgres documentation.