pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedRoles as objects in Postgres's security system
2+ messages / 2 participants
[nested] [flat]
* Roles as objects in Postgres's security system
@ 2008-07-02 09:30 sftf <sftf-misc@mail.ru>
2008-07-02 15:00 ` Re: Roles as objects in Postgres's security system Alvaro Herrera <alvherre@commandprompt.com>
0 siblings, 1 reply; 2+ messages in thread
From: sftf @ 2008-07-02 09:30 UTC (permalink / raw)
To: pgsql-admin
Hi!
My English is bad, so in short - why Postgres (and surprisingly other's, like Oracle) lacks something like this:
1. What roles who can create or delete (insteed solid CREATEROLE privilege)
GRANT { { CREATE | DROP }
[,...] | ALL [ PRIVILEGES ] }
ON { {ROLE rolename [, ...]} | ANY ROLE}
TO { rolename } [, ...] [ WITH ADMIN OPTION ]
2. What in what roles who can alter
GRANT ALTER { LOGIN | PASSWORD | INHERIT | RENAME | VALID | SET | и т.д. }
ON ROLE rolename [, ...]
TO { rolename } [, ...] [ WITH ADMIN OPTION ]
3. What roles who can grant to whom
GRANT GRANT {ANY | rolename [, ...]} }
ON ROLE rolename [, ...]
TO { rolename } [, ...] [ WITH GRANT OPTION ]
Any Help Will Be appreciated!
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Roles as objects in Postgres's security system
2008-07-02 09:30 Roles as objects in Postgres's security system sftf <sftf-misc@mail.ru>
@ 2008-07-02 15:00 ` Alvaro Herrera <alvherre@commandprompt.com>
0 siblings, 0 replies; 2+ messages in thread
From: Alvaro Herrera @ 2008-07-02 15:00 UTC (permalink / raw)
To: sftf <sftf-misc@mail.ru>; +Cc: pgsql-admin
sftf wrote:
> Hi!
> My English is bad, so in short - why Postgres (and surprisingly
> other's, like Oracle) lacks something like this:
If it's missing, it's because it's not implemented. This may be because
nobody has yet come to it, or because it has been decided that it will
not be implemented for whatever reason.
If the syntax you propose is part of the SQL standard, feel free to
propose it. If it's not, you need to present a solid case for it to be
implemented.
If you propose it and there are no objections, it doesn't mean it will
be implemented right away; it'll happen much sooner if you send a patch.
--
Alvaro Herrera http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2008-07-02 15:00 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2008-07-02 09:30 Roles as objects in Postgres's security system sftf <sftf-misc@mail.ru>
2008-07-02 15:00 ` Alvaro Herrera <alvherre@commandprompt.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox