Message-ID: <4E4C5683.1090003@ringerc.id.au>
Date: Thu, 18 Aug 2011 08:02:11 +0800
From: Craig Ringer <ringerc@ringerc.id.au>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
	rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-Version: 1.0
To: John R Pierce <pierce@hogranch.com>
CC: pgsql-general@postgresql.org
Subject: Re: Using Postgresql as application server
References: 
 <CAN2Y=uPjF14F5A9JXj02_vaPw4TMR0WGQid_w80xt4sC8o4qGg@mail.gmail.com>
	<4E46D0D7.3090700@officenet.no>
	<CAHyXU0xQp+-sA6-oPJVTYaFBYO_R4P=fnX+jm8Pgy_j0rPcO7Q@mail.gmail.com>
	<4E49B47E.8020401@ringerc.id.au>
	<CAHyXU0y16H=ywZ+2hRowXZ4GK-YGdmh-E2y+FDAeubx=cTPMvw@mail.gmail.com>
	<CAOR=d=0XN6Wrueh8rhE=X+Jb-MMPhy2kbfteMmprxMiNvuCLPg@mail.gmail.com>
	<CAKt_ZftbUeUPycofs1dqRbTvvqowi5_wA-7H1mdCa+kM_412tg@mail.gmail.com>
	<CAHyXU0z3H8gEXBXu9XE7sRqBUe=8HydTnvWkieprwmA1DGrbeg@mail.gmail.com>
	<CAKt_Zfsrm+TUd8qR=+q91_Zbvb2TKP0ghxjdu4D8N7Q2ep8Y5w@mail.gmail.com>
	<CAHyXU0zCRh1qxqwYEnaKDzudFfFgma54YidhKw1_d_c09DyL4w@mail.gmail.com>
	<CAKt_Zfv-B5TVYD16z9jTzviJXeah5-HCsCSBEXFec5LJ4sf_xQ@mail.gmail.com>
	<CAHyXU0yiUJM0V-1FyqZ0UMBc8cVtba9MBLwHNmsQSnSkSTuYLA@mail.gmail.com>
	<CAKt_ZfsV67rZfFVdFpxwfQ8Z5vQYLn639K6YfossGYxY6kE9Fw@mail.gmail.com>
	<CAHyXU0xrvu-mzptayGZVQaL7Vo2Xk+PBQXC7R4phV3Ev6XU8wg@mail.gmail.com>
	<4E4BEDBE.7050700@hogranch.com>
In-Reply-To: <4E4BEDBE.7050700@hogranch.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

On 18/08/2011 12:35 AM, John R Pierce wrote:
> On 08/17/11 7:40 AM, Merlin Moncure wrote:
>> GRANT/REVOKE only constrain read/write privileges to a database.
>
> at a table level, and even distinguishing between INSERT (writing new 
> data) and UPDATING (updating existing data).

Column level, actually :-) and they can control read access as well as 
write access.

Further control for writes can be applied using triggers that RAISE 
EXCEPTION when  they don't like something.

--
Craig Ringer