Re: pre-proposal: permissions made easier

From: David Fetter <david(at)fetter(dot)org>
To: Greg Stark <gsstark(at)mit(dot)edu>
Cc: Josh Berkus <josh(at)agliodbs(dot)com>, Jeff Davis <pgsql(at)j-davis(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: pre-proposal: permissions made easier
Date: 2009-06-30 04:18:34
Message-ID: 20090630041834.GL21081@fetter.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, Jun 30, 2009 at 04:24:40AM +0100, Greg Stark wrote:
> On Tue, Jun 30, 2009 at 1:51 AM, Josh Berkus<josh(at)agliodbs(dot)com> wrote:
> >
> >> It does seems slightly silly since surely anyone creating a new
> >> object would just paste in their grants from another object or
> >> some common source anyways, but I suppose that's the way with
> >> convenience features.
> >
> > That works fine until you have 6 (or more) defined roles and a
> > couple hundred objects, and are in a "agile" environment where the
> > dev team is constantly adding objects which have the wrong
> > permissions.  That's whose problem I'm trying to solve (because
> > they're my clients).
>
> Well I don't understand how you get them wrong if you're just
> pasting them from a file. I mean, sure you can pick the wrong
> template but nothing can help you there. You could just as easily
> pick the wrong template if it's a database feature instead of a text
> file.
>
> "Agile" doesn't mean doing things without thinking about them :)

It does in a lot of shops ;)

Cheers,
David.
--
David Fetter <david(at)fetter(dot)org> http://fetter.org/
Phone: +1 415 235 3778 AIM: dfetter666 Yahoo!: dfetter
Skype: davidfetter XMPP: david(dot)fetter(at)gmail(dot)com

Remember to vote!
Consider donating to Postgres: http://www.postgresql.org/about/donate

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Joshua Tolley 2009-06-30 04:34:22 Re: Multi-Dimensional Histograms
Previous Message Greg Stark 2009-06-30 04:17:17 Re: pre-proposal: permissions made easier