Re: Single Row Table?

From: Mike Nolan <nolan(at)gw(dot)tssi(dot)com>
To: spam_eater(at)gmx(dot)net (Thomas Kellerer)
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Single Row Table?
Date: 2004-08-31 21:15:23
Message-ID: 200408312115.i7VLFNWT018132@gw.tssi.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

> > Why not just revoke the delete privilege?
>
> That was one of my first guesses as well, but then I'm not sure if you can
> revoke DELETE and INSERT privilege from the owner of the table...

I just did a quick test on 7.4.5. Yes the table owner can revoke (and
re-grant) delete privileges on a table he owns, but of course I was not
able to revoke delete privileges from a superuser, since by definition
a superuser bypasses all access controls restrictions.

I assume the rule approach would apply to the superuser as well as to
other users. That makes it better able to handle this situation, whether
or not that approach has downsides is an internals question I can't answer.
--
Mike Nolan

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Steve Crawford 2004-08-31 21:17:51 Rule/sequence weirdness
Previous Message Thomas Kellerer 2004-08-31 21:09:30 Re: Single Row Table?