Re: GRANT ON ALL IN schema - Mailing list pgsql-hackers

From Tom Lane
Subject Re: GRANT ON ALL IN schema
Date
Msg-id 25515.1245248104@sss.pgh.pa.us
Whole thread Raw
In response to Re: GRANT ON ALL IN schema  (Peter Eisentraut <peter_e@gmx.net>)
Responses Re: GRANT ON ALL IN schema  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-hackers
Peter Eisentraut <peter_e@gmx.net> writes:
> I think you should design this with a bit wider scope.  Instead of just "all 
> tables in this schema", think "all tables satisfying some condition".  It has 
> been requested, for example, to be able to grant on all tables that match a 
> pattern.

I'm against that.  Functionality of that sort is available now if you
really need it (write a plpgsql loop around an EXECUTE) and it's fairly
hard to see a clean syntax that is significantly more general than
"GRANT ON schema.*".  In particular I strongly advise against getting
into supporting user-defined predicates in GRANT.  There are good
reasons for not having utility statements evaluate random expressions.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: GRANT ON ALL IN schema
Next
From: Peter Eisentraut
Date:
Subject: Re: machine-readable explain output