Re: restrict column-level GRANTs to a single relation?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: kevin brintnall <kbrint(at)rufus(dot)net>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: restrict column-level GRANTs to a single relation?
Date: 2006-01-19 15:14:42
Message-ID: 16268.1137683682@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

kevin brintnall <kbrint(at)rufus(dot)net> writes:
> GRANT SELECT (col1, col2, col3) ON table1, table2 TO grantee;

> Is it reasonable to restrict this to a single relation, and throw an error
> if multiple relations are specified?

The SQL spec doesn't actually allow multiple things after GRANT ... ON
--- that's a PG extension. So you could make the restriction and not
violate the spec. OTOH it seems unlikely that this would save much.

regards, tom lane

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Jim C. Nasby 2006-01-19 15:27:12 Re: No heap lookups on index
Previous Message Jim C. Nasby 2006-01-19 15:10:12 Re: [HACKERS] No heap lookups on index