Re: View permissions in 7.1

Hi Tom,

I guess I was a bit to optimistic about the patch. It seems like the select permissions
are solved, but update (inc. insert / delete) operations still fail with permission
denied on the nested views.

Regards,

Lieven

Tom Lane wrote:

> Lieven Van Acker <lieven(at)elisa(dot)be> writes:
> > [ permission checking doesn't work correctly for nested views in 7.1 ]
>
> I think the attached patch fixes your problem; at least it fixes the
> example you gave. Do you have time to try it out more heavily before
> Friday? I'd like to commit it for 7.1.1 if it's right ...
>
> regards, tom lane
>
> *** src/backend/rewrite/rewriteHandler.c.orig Mon Apr 16 20:32:58 2001
> --- src/backend/rewrite/rewriteHandler.c Wed May 2 22:06:16 2001
> ***************
> *** 309,317 ****
> --- 309,319 ----
> Assert(subrte->relid == relation->rd_id);
> subrte->checkForRead = rte->checkForRead;
> subrte->checkForWrite = rte->checkForWrite;
> + subrte->checkAsUser = rte->checkAsUser;
>
> rte->checkForRead = false; /* no permission check on subquery itself */
> rte->checkForWrite = false;
> + rte->checkAsUser = InvalidOid;
>
> /*
> * FOR UPDATE of view?
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
> (send "unregister YourEmailAddressHere" to majordomo(at)postgresql(dot)org)