Re: [HACKERS] Here it is - view permissions

>
> Bruce Momjian wrote:
> >All tables are created with default permissions for SELECT to PUBLIC, so
> >views are no different.
>
> Is this not contrary to the SQL standard? I understood that SQL tables
> are created with permissions for their creator only; any permissions for
> other users must be granted explicitly. According to "SQL The Standard
> Handbook" (Cannan & Otten, 1993), the owner of the schema in which a table
> is created is given a full set of privileges, and no other user can access

Will be the default in 6.3, I think.

> the table or even discover that it exists!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Not in 6.3, or maybe ever. Too much OO stuff for that, I think.

>
> It certainly seems undesirable to give automatic access to data of unknown
> sensitivity. Surely the default permission should be for the table's
> creator alone or for the owner of the PostgreSQL database (which I suppose
> is equivalent to the `schema').
>
> I see that Jan Wieck has posted a method for preventing world readability;
> perhaps this should just be flagged as a configurable option.

--
Bruce Momjian | 830 Blythe Avenue
maillist(at)candle(dot)pha(dot)pa(dot)us | Drexel Hill, Pennsylvania 19026
+ If your life is a hard drive, | (610) 353-9879(w)
+ Christ can be your backup. | (610) 853-3000(h)