Re: Access restrictions on rows depending on value of the a column - Mailing list pgsql-general

From Bruno Wolff III
Subject Re: Access restrictions on rows depending on value of the a column
Date
Msg-id 20040812174447.GB8739@wolff.to
Whole thread Raw
In response to Access restrictions on rows depending on value of the a column  (Renato Cramer <renato@domsis.com.br>)
List pgsql-general
On Thu, Aug 12, 2004 at 09:54:25 -0300,
  Renato Cramer <renato@domsis.com.br> wrote:
> Hello All,
>
> There is data of several enterprises (ours clients) in a single database.
> All tables have a column on primary key what identify the enterprise called
> id_enterprise.
> My objective is restrict users access on rows depending on value of the
> column id_enterprise.
> That is, an user can access data only of his enterprise.
>
> I don't want use where clause.
> There is some way of determine this in database?

You can use a view to do this. If they need to modify the data, then you
will need to use rules to make an updateable view. The easy way to do
this is to have a table that maps users to the id_enterprise values that
they are allowed to access and for each table you want to grant access
to, join this special table in the view using the current_user as the
the user to test against.

pgsql-general by date:

Previous
From: Bruno Wolff III
Date:
Subject: Re: Performance critical technical key
Next
From: Christopher Browne
Date:
Subject: Re: Replication options?