pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedGrant tables cascade to sequence?
3+ messages / 3 participants
[nested] [flat]
* Grant tables cascade to sequence?
@ 2013-03-29 05:56 Rural Hunter <ruralhunter@gmail.com>
2013-03-29 11:07 ` Re: Grant tables cascade to sequence? Albe Laurenz <laurenz.albe@wien.gv.at>
2013-03-29 16:51 ` Re: Grant tables cascade to sequence? Craig James <cjames@emolecules.com>
0 siblings, 2 replies; 3+ messages in thread
From: Rural Hunter @ 2013-03-29 05:56 UTC (permalink / raw)
To: pgsql-admin
Hi,
I encounter the same issue often: Granted update/insert to an user but
forgot to grant it on the related sequence. It's hard to understand that
an user has write access on table but not on necessary sequences. I
think the grant on tables should cascade to related sequences. What do
you think?
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Grant tables cascade to sequence?
2013-03-29 05:56 Grant tables cascade to sequence? Rural Hunter <ruralhunter@gmail.com>
@ 2013-03-29 11:07 ` Albe Laurenz <laurenz.albe@wien.gv.at>
1 sibling, 0 replies; 3+ messages in thread
From: Albe Laurenz @ 2013-03-29 11:07 UTC (permalink / raw)
To: Rural Hunter *EXTERN* <ruralhunter@gmail.com>; pgsql-admin
Rural Hunter wrote:
> I encounter the same issue often: Granted update/insert to an user but
> forgot to grant it on the related sequence. It's hard to understand that
> an user has write access on table but not on necessary sequences. I
> think the grant on tables should cascade to related sequences. What do
> you think?
I think that would make sense.
To me this seems related to the case where table B has a
foreign key to table A with cascading delete or update.
If a user has privileges on A, he or she can change values in
B without having any privileges on B.
Yours,
Laurenz Albe
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Grant tables cascade to sequence?
2013-03-29 05:56 Grant tables cascade to sequence? Rural Hunter <ruralhunter@gmail.com>
@ 2013-03-29 16:51 ` Craig James <cjames@emolecules.com>
1 sibling, 0 replies; 3+ messages in thread
From: Craig James @ 2013-03-29 16:51 UTC (permalink / raw)
To: Rural Hunter <ruralhunter@gmail.com>; pgsql-admin
On Thu, Mar 28, 2013 at 10:56 PM, Rural Hunter <ruralhunter@gmail.com>wrote:
> Hi,
>
> I encounter the same issue often: Granted update/insert to an user but
> forgot to grant it on the related sequence. It's hard to understand that an
> user has write access on table but not on necessary sequences. I think the
> grant on tables should cascade to related sequences. What do you think?
>
Wouldn't it make more sense for the grant on the table to fail with an
appropriate error message? That would solve your problem, and it wouldn't
be making security assumptions. Cascading permissions seems like a recipe
for trouble.
Craig
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2013-03-29 16:51 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2013-03-29 05:56 Grant tables cascade to sequence? Rural Hunter <ruralhunter@gmail.com>
2013-03-29 11:07 ` Albe Laurenz <laurenz.albe@wien.gv.at>
2013-03-29 16:51 ` Craig James <cjames@emolecules.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox