Re: pre-proposal: permissions made easier - Mailing list pgsql-hackers

From Jeff Davis
Subject Re: pre-proposal: permissions made easier
Date
Msg-id 1246299322.11096.55.camel@monkey-cat.sm.truviso.com
Whole thread Raw
In response to Re: pre-proposal: permissions made easier  (Josh Berkus <josh@agliodbs.com>)
Responses Re: pre-proposal: permissions made easier  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: pre-proposal: permissions made easier  (Josh Berkus <josh@agliodbs.com>)
List pgsql-hackers
On Mon, 2009-06-29 at 10:52 -0700, Josh Berkus wrote:
> 1) ALTER SCHEMA SET DEFAULT PRIVILEGES statements which sets default 
> permissions, by ROLE and object type, on new objects.
> 
> 2) a statement to set privs on all existing objects by type and role 
> within a schema.

I don't see why either of these things should be properties of the
schema. It seems to make much more sense for these defaults to be a
property of the user who creates the objects. 

If #1 and #2 are both implemented as properties of the user, I think
that solves the use case I brought up. It would still be difficult to
see the overall scheme at a glance, but I don't think that's a major
problem.

Regards,Jeff Davis



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Query progress indication - an implementation
Next
From: Robert Haas
Date:
Subject: Re: Query progress indication - an implementation