Re: patch for type privileges - Mailing list pgsql-hackers

From Merlin Moncure
Subject Re: patch for type privileges
Date
Msg-id CAHyXU0w_mYmBx+AVXM7fxGXn_HLpdCOeZedDJ8AwZg0x4ZFTnA@mail.gmail.com
Whole thread Raw
In response to patch for type privileges  (Peter Eisentraut <peter_e@gmx.net>)
Responses Re: patch for type privileges  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-hackers
On Tue, Nov 15, 2011 at 2:23 PM, Peter Eisentraut <peter_e@gmx.net> wrote:
> The basics here are mainly informed by the SQL standard.  One thing from
> there I did not implement is checking for permission of a type used in
> CAST (foo AS type).  This would be doable but relatively complicated,
> and in practice someone how is not supposed to be able to use the type
> wouldn't be able to create the cast or the underlying cast function
> anyway for lack of access to the type.

I'm not quite following that: with your patch are you or are you not
prohibited from utilizing casts?  In other words, if you didn't have
USAGE priv, what would happen if you tried this:

CREATE VIEW v AS SELECT null::restricted_type::text; ?

merlin


pgsql-hackers by date:

Previous
From: Gurjeet Singh
Date:
Subject: Re: Avoiding repeated snapshot computation
Next
From: Dimitri Fontaine
Date:
Subject: Re: Prep object creation hooks, and related sepgsql updates