Re: WIP: Column-level Privileges

From: Stephen Frost <sfrost(at)snowman(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Markus Wanner <markus(at)bluegap(dot)ch>, PostgreSQL-development Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: WIP: Column-level Privileges
Date: 2008-11-02 13:13:32
Message-ID: 20081102131332.GU4452@tamriel.snowman.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

* Tom Lane (tgl(at)sss(dot)pgh(dot)pa(dot)us) wrote:
> Stephen Frost <sfrost(at)snowman(dot)net> writes:
> > ... A case I just realized might be an issue is
> > doing a 'select 1 from x;' where you have *no* rights on x, or any
> > columns in it, would still get you the rowcount.
>
> Well, if you have table-level select on x, I would expect that to work,
> even if your privs on every column of x are revoked. If the patch
> doesn't get this right then it needs more work ...

Attached patch has this fixed and still passes all regression tests,
etc.

Thanks,

Stephen

Attachment Content-Type Size
colprivs_wip.2008110201.diff.gz application/octet-stream 23.6 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message David Rowley 2008-11-02 14:09:00 Re: Windowing Function Patch Review -> Performance Comparison.
Previous Message Stephen Frost 2008-11-02 12:53:40 Re: WIP: Column-level Privileges