restrict column-level GRANTs to a single relation? - Mailing list pgsql-hackers

From kevin brintnall
Subject restrict column-level GRANTs to a single relation?
Date
Msg-id 20060119085013.GA43061@rufus.net
Whole thread Raw
Responses Re: restrict column-level GRANTs to a single relation?  (Peter Eisentraut <peter_e@gmx.net>)
Re: restrict column-level GRANTs to a single relation?  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Fellow hackers,

I'm curious about the best way to handle something like this:
   GRANT SELECT (col1, col2, col3) ON table1, table2 TO grantee;

Is it reasonable to restrict this to a single relation, and throw an error
if multiple relations are specified?  That would require the preceding
grant to be specified as:
   GRANT SELECT (col1, col2, col3) ON table1 TO grantee;   GRANT SELECT (col1, col2, col3) ON table2 TO grantee;

The SQL standards don't seem to mandate the first form (unless I
misread?)..  Do y'all think this is a reasonable compromise?

-- kevin brintnall =~ <kbrint@rufus.net>


pgsql-hackers by date:

Previous
From: Leandro Guimarães Faria Corcete Dutra
Date:
Subject: Re: Surrogate keys (Was: enums)
Next
From: David Fetter
Date:
Subject: Re: Surrogate keys (Was: enums)