Re: [HACKERS] Here it is - view permissions]

From: Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us>
To: scrappy(at)hub(dot)org (The Hermit Hacker)
Cc: matti(at)algonet(dot)se, pgsql-hackers(at)postgreSQL(dot)org
Subject: Re: [HACKERS] Here it is - view permissions]
Date: 1998-02-23 13:15:17
Message-ID: 199802231315.IAA20853@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> > Why does views default to 'select' permission for 'public'?
> > I think most people will never think of the possibility that others
> > will be able to SELECT their data through views.
> > Should not 'create view' at least print a NOTICE about this?
>
> Considering how much security we are putting around everything
> else, is it unreasonably to have both 'create view'/'create table' default
> to 'revoke all' to public, and 'grant all' to owner?

Most commercial databases don't do this.

--
Bruce Momjian
maillist(at)candle(dot)pha(dot)pa(dot)us

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Jan Wieck 1998-02-23 13:27:12 Re: [HACKERS] Here it is - view permissions
Previous Message Bruce Momjian 1998-02-23 13:10:59 Re: [HACKERS] Here it is - view permissions