Tenant user management in cloud database operation

A system comprising:

• memory;
• one or more hardware processors coupled to the memory;
• and
• one or more computer readable storage media storing instructions that, when loaded into the memory, cause the one or more hardware processors to perform operations comprising:
• authenticating a login credential of a user by a scheduler, wherein the login credential is included in an original service request of the user for a database service;
• determining the user has privileges for the original service request by the scheduler;
• creating a modified service request from the original service request by the scheduler based on a predefined role corresponding to the privileges of the user;
• forwarding, by the scheduler, the modified service request to a database-as-a-service (DBaaS) platform;
• and
• assigning an instance of database service to the user in response to the modified service request,
• wherein authenticating the login credential of the user comprises authenticating the user by the scheduler and authenticating the scheduler by the DBaaS platform,
• wherein authenticating the user by the scheduler comprises decrypting a cookie stored on the scheduler using a private key of the user,
• wherein authenticating the user by the scheduler further comprises changing the login credential of the user and refreshing the cookie stored on the scheduler,
• wherein refreshing the cookie comprises:
• sending a public key from the scheduler to the user;
• validating the public key by the user;
• sending the login credential of the user to the scheduler;
• determining an asymmetric encryption algorithm by the scheduler;
• generating an encrypted login credential by the user using the asymmetric encryption algorithm determined by the scheduler;
• sending the encrypted login credential from the user to the scheduler;
• and
• storing the encrypted credential in the cookie by the scheduler.

One or more non-transitory computer-readable media containing program instructions for causing a computer to perform a method comprising:

• authenticating a login credential of a user by a scheduler, wherein the login credential is included in an original service request of the user for a database service;
• determining the user has privileges for the original service request by the scheduler;
• mapping the user to a predefined role, wherein the predefined role comprises a combination of privileges for accessing a database-as-a-service (DBaaS) platform;
• mapping a predefined public user to the predefined role, wherein the public user has an encrypted login credential that has been pre-authenticated to access the DBaaS platform;
• creating a modified service request by the scheduler by replacing the login credential of the user with the encrypted login credential of the public user in the service request;
• forwarding, by the scheduler, the modified service request to the DBaaS platform;
• and
• assigning an instance of database service to the user in response to the modified service request,
• wherein authenticating the login credential of the user comprises authenticating the user by the scheduler and authenticating the scheduler by the DBaaS platform,
• wherein authenticating the user by the scheduler comprises decrypting a cookie stored on the scheduler using a private key of the user,
• wherein authenticating the user by the scheduler further comprises changing the login credential of the user and refreshing the cookie stored on the scheduler,
• wherein refreshing the cookie comprises:
• sending a public key from the scheduler to the user;
• validating the public key by the user;
• sending the login credential of the user to the scheduler;
• determining an asymmetric encryption algorithm by the scheduler;
• generating an encrypted login credential by the user using the asymmetric encryption algorithm determined by the scheduler;
• sending the encrypted login credential from the user to the scheduler;
• and
• storing the encrypted credential in the cookie by the scheduler.