I want to create a user roles SQL table which stores information about users permissions and roles (Such as Admin, Worker, User)
I need 2 columns in the table one which identifies which user it is and the other is the level of permission the user has.
I was wondering, Is there any security concerns identifying users with their Username rather than their ID #. It would be a lot easier to manage user permissions with usernames and I'm willing to lose a bit of security if its not that bad.
Notes:
- My user table and user roles table are in the same database
- My user table has a ID column and a Username column