Received: from maia.hub.org (maia-5.hub.org [200.46.204.29])
	by mail.postgresql.org (Postfix) with ESMTP id D4A85B5DBDF
	for <pgsql-general-postgresql.org@mail.postgresql.org>;
	Wed, 17 Aug 2011 13:35:21 -0300 (ADT)
Received: from mail.postgresql.org ([200.46.204.86])
	by maia.hub.org (mx1.hub.org [200.46.204.29]) (amavisd-maia, port 10024)
	with ESMTP id 24685-01
	for <pgsql-general-postgresql.org@mail.postgresql.org>;
	Wed, 17 Aug 2011 16:35:15 +0000 (UTC)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from hogranch.com (hogranch.com [75.101.82.47])
	by mail.postgresql.org (Postfix) with ESMTP id 7E0E5B5DBD6
	for <pgsql-general@postgresql.org>;
	Wed, 17 Aug 2011 13:35:14 -0300 (ADT)
Received: from [127.0.0.1] (porker [192.168.0.2])
	by hogranch.com (8.11.6/8.11.6) with ESMTP id p7HGZAV26448
	for <pgsql-general@postgresql.org>; Wed, 17 Aug 2011 09:35:10 -0700
Message-ID: <4E4BEDBE.7050700@hogranch.com>
Date: Wed, 17 Aug 2011 09:35:10 -0700
From: John R Pierce <pierce@hogranch.com>
User-Agent: Mozilla/5.0 (Windows NT 5.1;
 rv:6.0) Gecko/20110812 Thunderbird/6.0
MIME-Version: 1.0
To: pgsql-general@postgresql.org
Subject: Re: Using Postgresql as application server
References: 
 <CAN2Y=uPjF14F5A9JXj02_vaPw4TMR0WGQid_w80xt4sC8o4qGg@mail.gmail.com>
	<4E46D0D7.3090700@officenet.no>
	<CAHyXU0xQp+-sA6-oPJVTYaFBYO_R4P=fnX+jm8Pgy_j0rPcO7Q@mail.gmail.com>
	<4E49B47E.8020401@ringerc.id.au>
	<CAHyXU0y16H=ywZ+2hRowXZ4GK-YGdmh-E2y+FDAeubx=cTPMvw@mail.gmail.com>
	<CAOR=d=0XN6Wrueh8rhE=X+Jb-MMPhy2kbfteMmprxMiNvuCLPg@mail.gmail.com>
	<CAKt_ZftbUeUPycofs1dqRbTvvqowi5_wA-7H1mdCa+kM_412tg@mail.gmail.com>
	<CAHyXU0z3H8gEXBXu9XE7sRqBUe=8HydTnvWkieprwmA1DGrbeg@mail.gmail.com>
	<CAKt_Zfsrm+TUd8qR=+q91_Zbvb2TKP0ghxjdu4D8N7Q2ep8Y5w@mail.gmail.com>
	<CAHyXU0zCRh1qxqwYEnaKDzudFfFgma54YidhKw1_d_c09DyL4w@mail.gmail.com>
	<CAKt_Zfv-B5TVYD16z9jTzviJXeah5-HCsCSBEXFec5LJ4sf_xQ@mail.gmail.com>
	<CAHyXU0yiUJM0V-1FyqZ0UMBc8cVtba9MBLwHNmsQSnSkSTuYLA@mail.gmail.com>
	<CAKt_ZfsV67rZfFVdFpxwfQ8Z5vQYLn639K6YfossGYxY6kE9Fw@mail.gmail.com>
	<CAHyXU0xrvu-mzptayGZVQaL7Vo2Xk+PBQXC7R4phV3Ev6XU8wg@mail.gmail.com>
In-Reply-To: 
 <CAHyXU0xrvu-mzptayGZVQaL7Vo2Xk+PBQXC7R4phV3Ev6XU8wg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-HawgScanner-Information: Please contact the ISP for more information
X-HawgScanner: Found to be clean
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=-2.973 tagged_above=-5 required=5 tests=BAYES_00=-1.9,
	RP_MATCHES_RCVD=-1.073
X-Spam-Level: 
X-Archive-Number: 201108/569
X-Sequence-Number: 178851

On 08/17/11 7:40 AM, Merlin Moncure wrote:
> GRANT/REVOKE only constrain read/write privileges to a database.

at a table level, and even distinguishing between INSERT (writing new 
data) and UPDATING (updating existing data).  you can get even finer 
granularity, using functions with SECURITY_DEFINER based permissions.



-- 
john r pierce                            N 37, W 122
santa cruz ca                         mid-left coast