From: sftf <sftf-misc@mail.ru>
To: pgsql-admin@postgresql.org
Subject: Roles as objects in Postgres's security system
Date: Wed, 2 Jul 2008 16:30:44 +0700
Message-ID: <1898029110.20080702163044@mail.ru> (raw)
Hi!
My English is bad, so in short - why Postgres (and surprisingly other's, like Oracle) lacks something like this:
1. What roles who can create or delete (insteed solid CREATEROLE privilege)
GRANT { { CREATE | DROP }
[,...] | ALL [ PRIVILEGES ] }
ON { {ROLE rolename [, ...]} | ANY ROLE}
TO { rolename } [, ...] [ WITH ADMIN OPTION ]
2. What in what roles who can alter
GRANT ALTER { LOGIN | PASSWORD | INHERIT | RENAME | VALID | SET | и т.д. }
ON ROLE rolename [, ...]
TO { rolename } [, ...] [ WITH ADMIN OPTION ]
3. What roles who can grant to whom
GRANT GRANT {ANY | rolename [, ...]} }
ON ROLE rolename [, ...]
TO { rolename } [, ...] [ WITH GRANT OPTION ]
Any Help Will Be appreciated!
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: sftf-misc@mail.ru
Subject: Re: Roles as objects in Postgres's security system
In-Reply-To: <1898029110.20080702163044@mail.ru>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox