Re: Data access permission? - Mailing list pgsql-general

From Oliver Elphick
Subject Re: Data access permission?
Date
Msg-id 200103302140.f2ULea314917@linda.lfix.co.uk
Whole thread Raw
In response to Data access permission?  (Pluto <pluto@annoyance.net>)
List pgsql-general
Pluto wrote:
  >Dear all
  >
  >Can PostgreSQL, MySQL or other database programs can allow some user to
  >access some specific data while other data is prohibited to them in a
  >same database? If so, how to implement that? For instance, a client can
  >print last month's statement through the Internet by providing a
  >password to him/her; this client can only check the data that belong to
  >him/her, at the meantime, there is other clients' data in the same
  >database. Thanks for your kind help!

What you need to do is to deny access to the underlying table, but
create views containing each user's particular data and make those views
readable by the appropriate users.  Updatable views are not yet
implemented, so you will have to do some roundabout work to enable
users to update data - perhaps have them store data in intermediate locations
from which some other process transfers the data into the underlying table.

You probably need to be running 7.1 to do this effectively.

--
Oliver Elphick                                Oliver.Elphick@lfix.co.uk
Isle of Wight                              http://www.lfix.co.uk/oliver
PGP: 1024R/32B8FAA1: 97 EA 1D 47 72 3F 28 47  6B 7E 39 CC 56 E4 C1 47
GPG: 1024D/3E1D0C1C: CA12 09E0 E8D5 8870 5839  932A 614D 4C34 3E1D 0C1C
                 ========================================
     "But the fruit of the Spirit is love, joy, peace,
      patience, kindness, goodness, faithfulness,
      gentleness, self control; against such there is no
      law."        Galatians 5:22,23



pgsql-general by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: Locale and LIKE matching
Next
From: Soma Interesting
Date:
Subject: RE: dynamic field names in a function.