Re: grants - Mailing list pgsql-hackers

From Andreas Pflug
Subject Re: grants
Date
Msg-id 404F45A3.5050802@pse-consulting.de
Whole thread Raw
In response to Re: grants  (Kris Jurka <books@ejurka.com>)
Responses Re: grants  (Kris Jurka <books@ejurka.com>)
List pgsql-hackers
Kris Jurka wrote:

>On Wed, 10 Mar 2004, Andreas Pflug wrote:
>
>  
>
>>Edgar Mares wrote:
>>
>>    
>>
>>>hi there  i'm  having troubles to find   how to 
>>>GRANT SELECT ON all-tables-onmydb TO specificuser
>>>
>>>this is  just  to  give  the access  to  "specificuser" to query the 
>>>database and  find troubles on it
>>>      
>>>
>>pgAdmin II has a tool for that (Security wizard; pgAdmin III has it on 
>>the todo-list)
>>
>>    
>>
>
>The problem that cannot be solved with either this or a function that 
>loops and grants on each table is that it is not a permanent grant of what 
>the admin had in mind.  If a new table is added or an existing table is 
>dropped and recreated, the grants must be done again.  The real use of a 
>SELECT ANY TABLE permission is ignorance of schema updates.
>  
>
Hm, does this exist in other DBMS?
As soon as roles are implemented, there might be a default role 
('public') for this. Until then, using groups solves most of the 
problems (well, you certainly still need to GRANT rights to your 
preferred group).

Regards,
Andreas




pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Timing of 'SELECT 1'
Next
From: Bruce Momjian
Date:
Subject: Re: Timing of 'SELECT 1'