Re: [PATCHES] Here it is - view permissions - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: [PATCHES] Here it is - view permissions
Date
Msg-id 199802210319.WAA13707@candle.pha.pa.us
Whole thread Raw
In response to Here it is - view permissions  (jwieck@debis.com (Jan Wieck))
Responses Re: [PATCHES] Here it is - view permissions
List pgsql-hackers
>     For  now  and  as  long  as  only superusers are permitted to
>     create rules or views due to the pg_rewrite permissions  this
>     should  be  ok.   But  we should change it soon by adding the
>     flag to pg_class as I said earlier and  have  only  the  view
>     owner and superusers permitted to change this flag.
>
>     This  flag is useful anyway. We change the world now that ALL
>     views are overriding the acl checks. If we have this flag  we
>     can  setup  views  that  behave  like before (user cannot see
>     anything through the view he cannot see without) and use  the
>     overriding  only  in  cases  we need it (like for the pg_user
>     permissions problem). I'll work on it.

This patch is missing changes to the other node handling functions for
rangetableentry.  Do you want me to add them?

--
Bruce Momjian
maillist@candle.pha.pa.us

pgsql-hackers by date:

Previous
From: Ryan Kirkpatrick
Date:
Subject: Re: [HACKERS] Platform status
Next
From: t-ishii@sra.co.jp (Tatsuo Ishii)
Date:
Subject: Re: [HACKERS] Platform status