Re: Permission on insert rules

Robert Treat wrote:

>On Fri, 2002-11-08 at 21:40, Bruce Momjian wrote:
>
>
>>Josh Berkus wrote:
>>
>>
>>>Luis,
>>>
>>>
>>>
>>>>Just a question.
>>>>I'm writing some rules to insert/update some data in my database, and I
>>>>gave all the privileges on that view to the user, and only select on the
>>>>tables.
>>>>When that user inserts data using the view, I thought that was user
>>>>postgres that will do the rest ! But I got permission denied on those
>>>>tables.
>>>>The idea was to create a layer, with the views, giving to that user
>>>>permission on views to insert and update, and not to tables.
>>>>Is this possible ?
>>>>
>>>>
>>>This is a known problem.
>>>
>>>I know that permissions for Functions has been addressed in 7.3. However, I
>>>am not sure about permissions for updatable views. Tom, Bruce?
>>>
>>>
>>Views have always had their own permissions.
>>
>>
>>
>
>If the functions can fire as there creator instead of there caller, then
>I would think as long as the creator has insert/update views on the base
>table, you should be able to do updateable rules and give only
>permissions to the view for the caller. (Though maybe you have to use
>triggers rather than rules to do this?) Does that sound right?
>
>Robert Treat
>
>
>
>
>
>
Is that the only way to do it ?

Luis Sousa