Re: grants

From: Kris Jurka <books(at)ejurka(dot)com>
To: Andreas Pflug <pgadmin(at)pse-consulting(dot)de>
Cc: Edgar Mares <edgarmaf(at)ife(dot)org(dot)mx>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: grants
Date: 2004-03-10 16:15:56
Message-ID: Pine.BSO.4.56.0403101112010.1611@leary.csoft.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, 10 Mar 2004, Andreas Pflug wrote:

> Edgar Mares wrote:
>
> > hi there i'm having troubles to find how to
> > GRANT SELECT ON all-tables-onmydb TO specificuser
> >
> > this is just to give the access to "specificuser" to query the
> > database and find troubles on it
>
> pgAdmin II has a tool for that (Security wizard; pgAdmin III has it on
> the todo-list)
>

The problem that cannot be solved with either this or a function that
loops and grants on each table is that it is not a permanent grant of what
the admin had in mind. If a new table is added or an existing table is
dropped and recreated, the grants must be done again. The real use of a
SELECT ANY TABLE permission is ignorance of schema updates.

Kris Jurka

In response to

  • Re: grants at 2004-03-10 11:53:41 from Andreas Pflug

Responses

  • Re: grants at 2004-03-10 16:43:15 from Andreas Pflug

Browse pgsql-hackers by date

  From Date Subject
Next Message Fabien COELHO 2004-03-10 16:19:17 Re: question about char/wchar/mb utils
Previous Message Andrew Dunstan 2004-03-10 16:14:14 Re: [PATCHES] log_line_info