Re: [HACKERS] Permissions on copy

From: Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us>
To: scrappy(at)hub(dot)org (The Hermit Hacker)
Cc: Andreas(dot)Zeugswetter(at)telecom(dot)at, pgsql-hackers(at)hub(dot)org
Subject: Re: [HACKERS] Permissions on copy
Date: 1998-02-20 17:22:03
Message-ID: 199802201722.MAA06128@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

>
> On Fri, 20 Feb 1998, Bruce Momjian wrote:
>
> > Two things. First was a separate COPY priviledge, which I vote against.
> > I see no real value to it, except to work around the problem that COPY
> > doesn't use rules.
>
> Okay, I may be totally out in left field here (ie. unrelated), but
> what stops a user from doing a 'COPY out' on a table that they don't have
> SELECT privileges on? Kind of negates 'REVOKE ALL...', no?

Yes I think a separate COPY permission makes no sense.

>

> > Second, there was the idea of making copy allow a real select statement
> > and not just a table name. If we do that, all goes through the
> > executor, and you get view and rules working properly. May have some
> > performance penalty, though it probabably will be minor.
>
> This sounds reasonable...
>
>
>

--
Bruce Momjian
maillist(at)candle(dot)pha(dot)pa(dot)us

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Jan Wieck 1998-02-20 17:22:33 Re: [HACKERS] Running pgindent
Previous Message Joseph Heil 1998-02-20 17:20:44 Re: [HACKERS] Who is everyone?