Re: security via views - Mailing list pgsql-admin

From Tom Lane
Subject Re: security via views
Date
Msg-id 24260.1114622850@sss.pgh.pa.us
Whole thread Raw
In response to security via views  (Enrico Weigelt <weigelt@metux.de>)
List pgsql-admin
Enrico Weigelt <weigelt@metux.de> writes:
> Most of the database access works over views and functions.
> For functions its possible to run them with separate privileges
> than the calling user. But is this also possible with views ?
> I've noticed that for views also GRANT is necessary (AFAIK a
> view is nothing else than a table with appropriate RULEs).

You have noticed incorrectly.  A view's references to other tables
are privilege-checked with respect to the owner of the view.

            regards, tom lane

pgsql-admin by date:

Previous
From: Scott Marlowe
Date:
Subject: Re: Client Authentication problem
Next
From: Michael Fuhr
Date:
Subject: Re: Client Authentication problem