Re: about truncate - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: about truncate
Date
Msg-id 4965F418.1050104@gmx.net
Whole thread Raw
In response to Re: about truncate  (David Fetter <david@fetter.org>)
Responses Re: about truncate  (David Fetter <david@fetter.org>)
List pgsql-hackers
David Fetter wrote:
> +1 for adding recursion to GRANT/REVOKE :)

This area is under SQL standard control, so we can't really invent our 
own behavior.

Consider the following:

CREATE TABLE persons (name, email);
CREATE TABLE employees (grade, salary) INHERITS (persons);

GRANT SELECT ON persons TO allstaff;  -- ???
GRANT SELECT ON employees TO managers;

What you want in practice is that allstaff can read only those columns 
of employees that come from the persons table.  Both recursive and 
nonrecursive GRANT do the wrong thing here.


pgsql-hackers by date:

Previous
From: Simon Riggs
Date:
Subject: Re: Latest version of Hot Standby patch
Next
From: Tom Lane
Date:
Subject: Re: New patch for Column-level privileges