Re: Proposal: access control jails (and introduction as aspiring GSoC student) - Mailing list pgsql-hackers

From Alvaro Herrera
Subject Re: Proposal: access control jails (and introduction as aspiring GSoC student)
Date
Msg-id 20100324001043.GD3240@alvh.no-ip.org
Whole thread Raw
In response to Re: Proposal: access control jails (and introduction as aspiring GSoC student)  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Proposal: access control jails (and introduction as aspiring GSoC student)
List pgsql-hackers
Tom Lane escribió:
> Alvaro Herrera <alvherre@commandprompt.com> writes:
> > Robert Haas escribi�:

> >> But roles aren't database-specific...  they're globals.
> 
> > Well, that's another longstanding request ;-)  (See the
> > db_user_namespace hack)
> 
> Yeah, you'd have to fix that first.  The "ambitious" part of that is
> coming up with a spec that everybody will accept.  Once you had that,
> coding it might not be very hard ...

I wonder if this is simpler now that we got rid of the flat files stuff.
We could validate the user once we've connected to a database and thus
able to poke at the local user catalog, not just the global one.  I
think that was a serious roadblock.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: booleans in recovery.conf
Next
From: Tom Lane
Date:
Subject: Re: Proposal: access control jails (and introduction as aspiring GSoC student)