Re: row-level security model

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: John DeSoi <jd(at)icx(dot)net>
Cc: pgsql List <pgsql-general(at)postgresql(dot)org>
Subject: Re: row-level security model
Date: 2004-04-02 15:39:23
Message-ID: 20040402153923.GA5151@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Thu, Apr 01, 2004 at 22:50:48 -0500,
John DeSoi <jd(at)icx(dot)net> wrote:
>
> Comments/criticisms about design or performance issues?

Except for SQL functions which can be inlined, the optimizer can't
optimize what is being done in the function with what is being done
in the select statement. This might be a performance issue depending
on your particular circumstances.

> Is there a way to provide column security without creating different
> views for every possible scenario?

You should be able to have one view per table and use an OR in the where
clause to check for student, teacher or parent access. These tests
should be simple enough, that you should be able to just do the joins
in the view.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Bruno Wolff III 2004-04-02 15:44:58 Re: row-level security model
Previous Message Tom Lane 2004-04-02 15:22:44 Re: Optimization on UPDATEs and FOREIGN KEYs...