Re: Column-Level Privileges - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Column-Level Privileges
Date
Msg-id 20090129040704.GE8123@tamriel.snowman.net
Whole thread Raw
In response to Re: Column-Level Privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Tom, et al,

* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> There are still some significant loose ends though:

Apologies for not having this finished already, been kind of caught up
in some discussions. :)

> * Some of the information_schema views are specified to respond to
> per-column privileges; the column_privileges and columns views
> certainly need work now to meet spec, and there might be others.

Done.

> * It might be appropriate to let the pg_stats view expose stats for
> columns you have select privilege for, even if you haven't got it
> across the whole table.

Done.

> * We probably ought to invent has_column_privilege SQL functions
> analogous to has_table_privilege; this is not just for completeness,
> but is probably necessary to finish the above items.

Done.

> * ISTM that COPY with a column list should succeed if you have
> SELECT or INSERT privilege on just the mentioned columns.

Currently working on this one, doesn't look too bad, but I'm not going
to get it finished tonight.  Once I've got this done, hopefully
tomorrow, I'll send in a patch against HEAD for all of the above.
Thanks,
    Stephen

pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: How to get SE-PostgreSQL acceptable
Next
From: KaiGai Kohei
Date:
Subject: Re: How to get SE-PostgreSQL acceptable