Re: Default permissisons from schemas - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Default permissisons from schemas
Date
Msg-id 3288.1169577478@sss.pgh.pa.us
Whole thread Raw
In response to Re: Default permissisons from schemas  (Stephen Frost <sfrost@snowman.net>)
Responses Re: Default permissisons from schemas
List pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> * Tom Lane (tgl@sss.pgh.pa.us) wrote:
>> Whoa.  You are going to allow people to create objects owned by someone
>> else?  I don't think so ... most Unix systems have forbidden object
>> give-away for years, for very good reasons.

> Hmm.  While I agree with the sentiment, Unix does provide for setgid
> such that objects inherit a specific group on creation.  Using roles we
> don't get that distinction so I don't think comparing it to Unix is a
> slam-dunk.  There do need to be limitations here though, certainly.

Before discussing "limitations" you should first justify why we need any
such concept at all.  It was no part of the original TODO item and I
cannot see any good use for it.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: "tupdesc reference is not owned by resource owner Portal" issue in 8.2 and -HEAD
Next
From: Brian Hurt
Date:
Subject: Re: tripping an assert in 8.1.6 (more info)