Re: Security Issue..

Tom Lane writes:

> Peter Eisentraut <peter_e(at)gmx(dot)net> writes:
> > For instance, if you create a view
> > CREATE VIEW bar AS SELECT * FROM foo;
> > then the statement
> > SELECT * FROM bar;
> > needs privileges to read "foo".
>
> This works just fine, thank you: the privileges are checked against the
> owner of the view.

OK, nevermind. The case I was referring to was that the CREATE VIEW
statement succeeds and the privileges are checked when the view is
queried. This is not in compliance with SQL, but it doesn't seem to
matter that much.

--
Peter Eisentraut peter_e(at)gmx(dot)net