Re: Proposal for enhancements of privilege system

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: PostgreSQL Development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Proposal for enhancements of privilege system
Date: 2000-05-23 21:38:11
Message-ID: Pine.LNX.4.21.0005232332490.359-100000@localhost.localdomain
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tom Lane writes:

> Really, having an OID column that might reference either users or groups
> is the SQL equivalent of a type pun.

Well, I don't really know what a type pun is but the priobj column would
do exactly the same thing by referring to tables, types, functions, etc.
by unadorned oid, which I thought would be pretty nice. Really, in normal
mode of operation there is never a question "Does this privilege apply to
a user or a group?" it's always "Given this object and this user/group id,
do I have access?" I don't see that as a practical problem, but I'll think
about it.

--
Peter Eisentraut Sernanders väg 10:115
peter_e(at)gmx(dot)net 75262 Uppsala
http://yi.org/peter-e/ Sweden

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Eisentraut 2000-05-23 21:39:20 Re: Serious problem within authentication subsystem in 7.0
Previous Message The Hermit Hacker 2000-05-23 21:13:26 New Lists ...