pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: John R Pierce <pierce@hogranch.com>
To: pgsql-general@postgresql.org
Subject: Re: Using Postgresql as application server
Date: Wed, 17 Aug 2011 09:35:10 -0700
Message-ID: <4E4BEDBE.7050700@hogranch.com> (raw)
In-Reply-To: <CAHyXU0xrvu-mzptayGZVQaL7Vo2Xk+PBQXC7R4phV3Ev6XU8wg@mail.gmail.com>
References: <CAN2Y=uPjF14F5A9JXj02_vaPw4TMR0WGQid_w80xt4sC8o4qGg@mail.gmail.com>
	<4E46D0D7.3090700@officenet.no>
	<CAHyXU0xQp+-sA6-oPJVTYaFBYO_R4P=fnX+jm8Pgy_j0rPcO7Q@mail.gmail.com>
	<4E49B47E.8020401@ringerc.id.au>
	<CAHyXU0y16H=ywZ+2hRowXZ4GK-YGdmh-E2y+FDAeubx=cTPMvw@mail.gmail.com>
	<CAOR=d=0XN6Wrueh8rhE=X+Jb-MMPhy2kbfteMmprxMiNvuCLPg@mail.gmail.com>
	<CAKt_ZftbUeUPycofs1dqRbTvvqowi5_wA-7H1mdCa+kM_412tg@mail.gmail.com>
	<CAHyXU0z3H8gEXBXu9XE7sRqBUe=8HydTnvWkieprwmA1DGrbeg@mail.gmail.com>
	<CAKt_Zfsrm+TUd8qR=+q91_Zbvb2TKP0ghxjdu4D8N7Q2ep8Y5w@mail.gmail.com>
	<CAHyXU0zCRh1qxqwYEnaKDzudFfFgma54YidhKw1_d_c09DyL4w@mail.gmail.com>
	<CAKt_Zfv-B5TVYD16z9jTzviJXeah5-HCsCSBEXFec5LJ4sf_xQ@mail.gmail.com>
	<CAHyXU0yiUJM0V-1FyqZ0UMBc8cVtba9MBLwHNmsQSnSkSTuYLA@mail.gmail.com>
	<CAKt_ZfsV67rZfFVdFpxwfQ8Z5vQYLn639K6YfossGYxY6kE9Fw@mail.gmail.com>
	<CAHyXU0xrvu-mzptayGZVQaL7Vo2Xk+PBQXC7R4phV3Ev6XU8wg@mail.gmail.com>

On 08/17/11 7:40 AM, Merlin Moncure wrote:
> GRANT/REVOKE only constrain read/write privileges to a database.

at a table level, and even distinguishing between INSERT (writing new 
data) and UPDATING (updating existing data).  you can get even finer 
granularity, using functions with SECURITY_DEFINER based permissions.



-- 
john r pierce                            N 37, W 122
santa cruz ca                         mid-left coast




view thread (88+ messages)  latest in thread

Message-ID: <4E4BEDBE.7050700@hogranch.com>
Permalink:  ../4E4BEDBE.7050700@hogranch.com/
Also on:    postgresql.org/message-id/4E4BEDBE.7050700@hogranch.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: pierce@hogranch.com, pgsql-general@postgresql.org
  Subject: Re: Using Postgresql as application server
  In-Reply-To: <4E4BEDBE.7050700@hogranch.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox