Webb Sprague wrote:
>> you can set transactions read only but the user can turn them off. Use
>> views, functions and GRANT.
>
> Views was the key word. I had tried to do it with functions and GRANT alone.
You can also do a lot with SECURITY DEFINER functions - for example, if
you want to grant them the ability to make only very limited changes to
the data set and want to run some checking logic before allowing the change.
--
Craig Ringer