Re: New patch for Column-level privileges - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: New patch for Column-level privileges
Date
Msg-id 20090113172341.GD4656@tamriel.snowman.net
Whole thread Raw
In response to Re: New patch for Column-level privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: New patch for Column-level privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Stephen Frost <sfrost@snowman.net> writes:
> > * Tom Lane (tgl@sss.pgh.pa.us) wrote:
> >> What I see being tested is SELECT *, which is a different animal
> >> entirely.
>
> > Wouldn't this test cover those?
> >   SELECT atest5 FROM atest5; -- fail
>
> Oh, I didn't see that.  Still, this doesn't test whether the behavior
> is correct with respect to ADD/DROP COLUMN --- if that were implemented
> like SELECT * you'd not see any change in the regression result.

Hrm.  If a column is added and you're not granted SELECT rights on it
(even if you have access to all the originals), it should start failing
for you.  I can certainly add a test case to cover that though.  Or is
that not the behavior you're expecting?
Thanks,
    Stephen

pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: [BUGS] Status of issue 4593
Next
From: "Kevin Grittner"
Date:
Subject: Re: [BUGS] Status of issue 4593