Thread: Urgent!!!! Setting permissions on Views

Urgent!!!! Setting permissions on Views

From
"Dani Mezher"
Date:

Hello,

 

            I have a small problem setting the permissions for my data. Actually my application allows specific users to manipulate selected tuples stored in the same tables. Therefore, I revoked all privileged on the tables and encapsulated them through views based on the “user” variable. This way specific users control specific data.

 

            The problem arises when I try to lock my data once it was validated. Although I set the permissions on the views to select and revoked the insert, update and delete privileges; my users are capable of modifying the table through the views. I even tried to revoke the select permission but this does not solve the problem.

 

            Can anyone help me fix this problem???

 

Regards

Re: Urgent!!!! Setting permissions on Views

From
Tom Lane
Date:
"Dani Mezher" <dany.mezher@fi.usj.edu.lb> writes:
>             I have a small problem setting the permissions for my data.

What PG version is this?  There's a known bug in some recent versions
about checking view permissions ...

            regards, tom lane

Re: Urgent!!!! Setting permissions on Views

From
"Greg Patnude"
Date:
CREATE RULE no_inserts_on_my_view AS ON INSERT TO myView DO INSTEAD NOTHING;
 

--
Greg Patnude / The Digital Demention
2916 East Upper Hayden Lake Road
Hayden Lake, ID 83835
(208) 762-0762

Hello,

 

            I have a small problem setting the permissions for my data. Actually my application allows specific users to manipulate selected tuples stored in the same tables. Therefore, I revoked all privileged on the tables and encapsulated them through views based on the “user” variable. This way specific users control specific data.

 

            The problem arises when I try to lock my data once it was validated. Although I set the permissions on the views to select and revoked the insert, update and delete privileges; my users are capable of modifying the table through the views. I even tried to revoke the select permission but this does not solve the problem.

 

            Can anyone help me fix this problem???

 

Regards