Re: row-level security model - Mailing list pgsql-general

From Bruno Wolff III
Subject Re: row-level security model
Date
Msg-id 20040402153923.GA5151@wolff.to
Whole thread Raw
In response to Re: row-level security model  (John DeSoi <jd@icx.net>)
Responses Re: row-level security model
List pgsql-general
On Thu, Apr 01, 2004 at 22:50:48 -0500,
  John DeSoi <jd@icx.net> wrote:
>
> Comments/criticisms about design or performance issues?

Except for SQL functions which can be inlined, the optimizer can't
optimize what is being done in the function with what is being done
in the select statement. This might be a performance issue depending
on your particular circumstances.

> Is there a way to provide column security without creating different
> views for every possible scenario?

You should be able to have one view per table and use an OR in the where
clause to check for student, teacher or parent access. These tests
should be simple enough, that you should be able to just do the joins
in the view.

pgsql-general by date:

Previous
From: Tom Lane
Date:
Subject: Re: Optimization on UPDATEs and FOREIGN KEYs...
Next
From: Bruno Wolff III
Date:
Subject: Re: row-level security model