Re: WITH CHECK and Column-Level Privileges - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: WITH CHECK and Column-Level Privileges
Date
Msg-id 20140926153509.GO16422@tamriel.snowman.net
Whole thread Raw
In response to Re: WITH CHECK and Column-Level Privileges  (Stephen Frost <sfrost@snowman.net>)
Responses Re: WITH CHECK and Column-Level Privileges  (Stephen Frost <sfrost@snowman.net>)
List pgsql-hackers
* Stephen Frost (sfrost@snowman.net) wrote:
> * Stephen Frost (sfrost@snowman.net) wrote:
> > > Is there similar problems with unique or exclusion constraints?
> >
> > That's certainly an excellent question..  I'll have to go look.
>
> Looks like there is an issue here with CHECK constraints and NOT NULL
> constraints, yes.  The uniqueness check complains about the key already
> existing and returns the key, but I don't think that's actually a
> problem- to get that to happen you have to specify the new key and
> that's what is returned.

Yeah, I take that back.  If there is a composite key involved then you
can run into the same issue- you update one of the columns to a
conflicting value and get back the entire key, including columns you
shouldn't be allowed to see.

Ugh.
Thanks,
    Stephen

pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: WITH CHECK and Column-Level Privileges
Next
From: "Erik Rijkers"
Date:
Subject: Re: BRIN indexes - TRAP: BadArgument