Re: Granting permission on a sequence to a group

OK, I think I figured this out, but if someone can confirm that this is the
correct way to do this I'd appreciate it.

Since a sequence in postgres is actually a table, I realized that to pull a
value off and have it increment you must be able to update the table. So I
granted select and update on the sequence to the group, and now the user's
in the group are able to use nextval().

Is this definitely the correct way to handle this?

The thing I really don't like about this is that now the user's in that
group can perform setval() on the sequence! That's seem like a big risk.

If someone can confirm my solution or give me the proper way to do this I
would greatly appreciate it.

Thanks again,

Jed.

> _____________________________________________
> From: Walker, Jed S
> Sent: Friday, April 22, 2005 8:21 AM
> To: Walker, Jed S; 'pgsql-novice(at)postgresql(dot)org'
> Subject: RE: Granting permission on a sequence to a group
>
> I found a note in a book that states that using "nextval" can't be done
> with only select privileges, but it doesn't say what else is needed. Can
> someone tell me (hopefully I find it eventually)?
>
> _____________________________________________
> From: Walker, Jed S
> Sent: Thursday, April 21, 2005 3:50 PM
> To: 'pgsql-novice(at)postgresql(dot)org'
> Subject: Granting permission on a sequence to a group
>
> Hi,
>
> I have a sequence seq_page owned by user vrnsys. Vrnsys has granted
> "select" on seq_page to group vrn_admin. vrn_admin group has had user
> vrngui added to it, but vrngui is not able to access the sequence
> (permission denied for sequence seq_page).
>
> 1. Any ideas why this isn't working?
>
> Thanks in advance,
>
> Jed S. Walker
>
>
>