Re: Proposal: GRANT cascade to implicit sequences - Mailing list pgsql-general

From Bruno Wolff III
Subject Re: Proposal: GRANT cascade to implicit sequences
Date
Msg-id 20041013162514.GA10883@wolff.to
Whole thread Raw
In response to Proposal: GRANT cascade to implicit sequences  (Michael Fuhr <mike@fuhr.org>)
Responses Re: Proposal: GRANT cascade to implicit sequences
List pgsql-general
On Wed, Oct 13, 2004 at 00:37:35 -0600,
  Michael Fuhr <mike@fuhr.org> wrote:
> Comments?  Can anybody think of why cascading GRANT and REVOKE to
> implicit sequences might be A Bad Idea?

Since you can do odd things using explicit sequences, limiting implicit
sequences to make things convenient in the common case seems like a
reasonable goal.

If you go that route it may be a good idea to not allow direct grants and
revokes on implicit sequences and just have their access rights derived from
the tables.

I also think there is some merit in splitting the access rights for nextval
and setval, so that insert access grants access to nextval and update access
grants access to setval (or perhaps both nextval and setval). That way people
who can just insert in the table can't set the sequence number backwards.

pgsql-general by date:

Previous
From: Tino Wildenhain
Date:
Subject: Re: Commit / Rollback in PL/pgSQL ?
Next
From: Chris Browne
Date:
Subject: Re: Proper Sizing of Shared Buffer Cache