Re: users, address record restrictions - Mailing list pgsql-interfaces

From Michael Fuhr
Subject Re: users, address record restrictions
Date
Msg-id 20050620232209.GA27784@winnie.fuhr.org
Whole thread Raw
In response to users, address record restrictions  (Teunis Peters <teunis@wintersgift.com>)
List pgsql-interfaces
On Mon, Jun 20, 2005 at 11:51:11AM -0700, Teunis Peters wrote:
>
> I've got an interesting problem - this MIGHT (probably) isn't the right 
> forum for this.

pgsql-general is usually a good place if you're not sure where a
question belongs.  This doesn't sound much like an interfaces
problem.

> however - I'd like to restrict access to specific records and groups of 
> records (based on another table) - and I'm not even sure where to start 
> looking.

By "access" do you mean SELECT only, or also INSERT, UPDATE, and/or
DELETE?  One possibility might be to use a view with a WHERE clause
that does the restriction.  You'd revoke all privileges from the
underlying tables and grant whatever privileges people need on the
view, possibly adding rules to rewrite INSERT, UPDATE, and DELETE
operations.

-- 
Michael Fuhr
http://www.fuhr.org/~mfuhr/


pgsql-interfaces by date:

Previous
From: Teunis Peters
Date:
Subject: users, address record restrictions
Next
From: "Greg Sabino Mullane"
Date:
Subject: Version 1.42_1 (1.43 beta) of DBD::Pg uploaded to CPAN