Re: Foreign keys and access privileges - Mailing list pgsql-sql

From mkresse@slyde.in-berlin.de
Subject Re: Foreign keys and access privileges
Date
Msg-id 200005182220.e4IMKvT32127@einhorn.in-berlin.de
Whole thread Raw
In response to Re: Foreign keys and access privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-sql
> mkresse@slyde.in-berlin.de writes:
> > Now, with Postgres 7.0 RC1, when some user (not the owner of the 
> > db, of course) tries to update, change or insert anything into 
> > choice, he gets an error message that says 'Permission denied' for 
> > table users. 
> 
> IIRC this is a known bug in RC1 (permissions not handled correctly
> for foreign key references).  Have you tried it in 7.0 final?

Yes, it's still there (in 7.0). Try the following two tables:

create table a(x integer primary key);
create table b(y integer references a);
grant all on b to public;

When someone else than the owner tries an insert into b, he gets 
a 'Permission denied'. For the operation to be successful, he needs 
to have select and update privileges on a.

Ciao,Martin


pgsql-sql by date:

Previous
From: Tom Lane
Date:
Subject: Re: Foreign keys breaks tables permissions
Next
From: "Rudolph, Michael"
Date:
Subject: AW: What is the difference between NULL and "undef"