Re: [HACKERS] RFC: Security and Impersonation - Mailing list pgsql-hackers

From Tom Lane
Subject Re: [HACKERS] RFC: Security and Impersonation
Date
Msg-id 14550.932741501@sss.pgh.pa.us
Whole thread Raw
In response to RFC: Security and Impersonation  (Philip Warner <pjw@rhyme.com.au>)
Responses Re: [HACKERS] RFC: Security and Impersonation
List pgsql-hackers
Philip Warner <pjw@rhyme.com.au> writes:
> A very useful feature in some database systems is the ability to
> restrict who can run certain external or stored procedures, and to
> grant extra access rights to users when they do run those procedures.

We have some of this, I think, from ACLs on tables and views.  But
as far as I know there is not a notion of a "suid view", one with
different privileges from its caller.  It sounds like a good thing
to work on.  Is there any standard in the area?
        regards, tom lane


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: [HACKERS] Phantom row from aggregate in self-join in 6.5
Next
From: Tom Lane
Date:
Subject: Re: [HACKERS] Index not used on simple select