Re: Possibilities of Fine Grained Access Control? - Mailing list pgsql-general

From Bill Moran
Subject Re: Possibilities of Fine Grained Access Control?
Date
Msg-id 20071017085325.975170b0.wmoran@potentialtech.com
Whole thread Raw
In response to Possibilities of Fine Grained Access Control?  (Uden van Hout <udenvh@gmail.com>)
List pgsql-general
In response to Uden van Hout <udenvh@gmail.com>:

> I need a solution for the following: With all data stored in the same
> schema, consumers may only retreive and update data that is relevant to
> them. At the same time, users in our own company need to see all data.
>
> Is a solution similar to Oracle's Virtual Private Database possible with
> PostgreSQL, as this is precisely what we need?

Not familiar with Oracle's solution, but ...

Without knowing the details, it's difficult to be sure if PostgreSQL's
native security meets your needs.  You can assign read/write/create
permissions to databases, schemas, tables, and other objects:
http://www.postgresql.org/docs/8.2/static/sql-grant.html

This falls short if you need permissions at the row or column level,
which PG doesn't support naively (unless this has been added in 8.3
and I simply haven't see the announcement).

For that, the best approach I know for you is Veil:
http://veil.projects.postgresql.org/curdocs/index.html

--
Bill Moran
http://www.potentialtech.com

pgsql-general by date:

Previous
From: Syan Tan
Date:
Subject: Re: atomic commit;begin for long running transactions , in combination with savepoint.
Next
From: "Bryan Murphy"
Date:
Subject: Re: Index Usage