Re: How to create read-only view on 9.3 - Mailing list pgsql-hackers

From Andrew Dunstan
Subject Re: How to create read-only view on 9.3
Date
Msg-id 520A78A1.4030504@dunslane.net
Whole thread Raw
In response to Re: How to create read-only view on 9.3  (Hannu Krosing <hannu@2ndQuadrant.com>)
List pgsql-hackers
On 08/13/2013 01:33 PM, Hannu Krosing wrote:

>>
>> In any case, using permissions is a somewhat leaky bandaid, since
>> superusers have overriding access privileges anyway. A better way
>> to do what the OP wants might be to have a view trigger that raises an
>> exception.
> Superuser can easily disable or drop the trigger as well.

That's true, but it requires positive action to do so. Thus the trigger 
can give you some protection in cases of stupidity, if not cases of malice.

cheers

andrew



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: How to create read-only view on 9.3
Next
From: Tom Lane
Date:
Subject: Release schedule for PG 9.3