Re: GRANT/REVOKE: Allow column-level privileges - Mailing list pgsql-hackers

From William ZHANG
Subject Re: GRANT/REVOKE: Allow column-level privileges
Date
Msg-id drkjrv$2dbl$1@news.hub.org
Whole thread Raw
In response to TODO: GRANT/REVOKE: Allow column-level privileges  (kevin brintnall <kbrint@rufus.net>)
Responses Re: GRANT/REVOKE: Allow column-level privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
>> 2. deal with circles in GRANT graph.
>
> Can you give an examle for how this is any different for column-level
> GRANTs?

When judging if there are any circles in the grant graph, we can represent
table priviledges as column priviledges, thus make things easier. I have not
think hard enought to figure out a better algorithm.

Another problem is, should we allow any circles to be formed when executing
GRANTs?  Say:   <grantor1, grantee1, object1, priviledge1, with grant option>,   <grantee1, grantee2, object1,
priviledge1,with grant option>,   <grantee2, grantor1, object1, priviledge1, with grant option>,
 
should the third GRANT be executed successfuly?
I remember that MSSQL 2000 and ORACLE 9i are different.

William ZHANG




pgsql-hackers by date:

Previous
From: Christopher Kings-Lynne
Date:
Subject: Weirdness with =?
Next
From: Thomas Hallgren
Date:
Subject: Re: Want to add to contrib.... xmldbx