Any need of GRANT/REVOKE CREATE TABLE | POLICY | ETC

From: Haribabu Kommi <kommi(dot)haribabu(at)gmail(dot)com>
To: "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Any need of GRANT/REVOKE CREATE TABLE | POLICY | ETC
Date: 2016-07-19 06:59:12
Message-ID: CAJrrPGfb3dL0YcsihFGp5NWHV53L2Y88uPnyBX=zX9bS=DrxQA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi All,

During the discussion of supporting multi tenancy with the help of
row level security, because of some problems of executing any
policy that was created by an unprivileged user [1].

To avoid that problem, If we have some kind of new mechanism to
GRANT/REVOKE only CREATE POLICY from all the unprivileged
users by providing other CREATE access to them.

I just want to know is there any other such requirements that if such
option is available, it would be good or not? I don't know whether
this option is possible or not? If any such requirements are present
other than POLICY, i would like to analyze and propose a patch for
the same.

[1] - https://www.postgresql.org/message-id/21902.1455052932%40sss.pgh.pa.us

Regards,
Hari Babu
Fujitsu Australia

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Masahiko Sawada 2016-07-19 09:53:38 Adjust recovery test file name
Previous Message Haribabu Kommi 2016-07-19 06:42:52 Re: Multi-tenancy with RLS