Re: Must be table owner to truncate?

From: Ragnar <gnari(at)hive(dot)is>
To: Kevin Hunter <hunteke(at)earlham(dot)edu>
Cc: Postgres General List <pgsql-general(at)postgresql(dot)org>
Subject: Re: Must be table owner to truncate?
Date: 2008-07-30 12:52:26
Message-ID: 1217422346.9672.1.camel@localhost.localdomain
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general


On mið, 2008-07-30 at 07:36 -0400, Kevin Hunter wrote:
> At 3:45p -0400 on Mon, 28 Jul 2008, Said Ramirez wrote:
> > According to the documentation,
> > http://www.postgresql.org/docs/current/interactive/sql-truncate.html ,
> > only the owner can truncate a table. Which means the non-owner must
> > either log in/ switch roles as the owner, or they can just run a DELETE.
>
> Well that's interesting. From a security standpoint, what's the
> difference between an unqualified DELETE and a TRUNCATE?

lack of triggers and RULEs spring to mind.

gnari

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Ian Lea 2008-07-30 13:50:00 Re: Problem running script
Previous Message Kevin Hunter 2008-07-30 11:36:35 Re: Must be table owner to truncate?