Re: Data access permission?

From: "Oliver Elphick" <olly(at)lfix(dot)co(dot)uk>
To: Pluto <pluto(at)annoyance(dot)net>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Data access permission?
Date: 2001-03-30 21:40:36
Message-ID: 200103302140.f2ULea314917@linda.lfix.co.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Pluto wrote:
>Dear all
>
>Can PostgreSQL, MySQL or other database programs can allow some user to
>access some specific data while other data is prohibited to them in a
>same database? If so, how to implement that? For instance, a client can
>print last month's statement through the Internet by providing a
>password to him/her; this client can only check the data that belong to
>him/her, at the meantime, there is other clients' data in the same
>database. Thanks for your kind help!

What you need to do is to deny access to the underlying table, but
create views containing each user's particular data and make those views
readable by the appropriate users. Updatable views are not yet
implemented, so you will have to do some roundabout work to enable
users to update data - perhaps have them store data in intermediate locations
from which some other process transfers the data into the underlying table.

You probably need to be running 7.1 to do this effectively.

--
Oliver Elphick Oliver(dot)Elphick(at)lfix(dot)co(dot)uk
Isle of Wight http://www.lfix.co.uk/oliver
PGP: 1024R/32B8FAA1: 97 EA 1D 47 72 3F 28 47 6B 7E 39 CC 56 E4 C1 47
GPG: 1024D/3E1D0C1C: CA12 09E0 E8D5 8870 5839 932A 614D 4C34 3E1D 0C1C
========================================
"But the fruit of the Spirit is love, joy, peace,
patience, kindness, goodness, faithfulness,
gentleness, self control; against such there is no
law." Galatians 5:22,23

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Soma Interesting 2001-03-30 21:58:46 RE: dynamic field names in a function.
Previous Message ADBAAMD 2001-03-30 21:39:03 Re: Locale and LIKE matching