pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Wim Bertels <wim.bertels@ucll.be>
To: Wells Oliver <wells.oliver@gmail.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: Baffled by basic permission issue.
Date: Thu, 17 Jun 2021 08:43:04 +0200
Message-ID: <efa9c36e5050bca1cde2e57b9b2c10f1a7535d36.camel@ucll.be> (raw)
In-Reply-To: <805163.1623878495@sss.pgh.pa.us>
References: <CAOC+FBV5TxsJ4CHTo60TYGDNU0Y1eM=XzrzHJNmSgpyFLdmqMg@mail.gmail.com>
	<3AD88617-B7E7-4AF5-AE0B-05A79F88C2CC@jakobs.com>
	<CAOC+FBUvbGuZ5iY9bh8xCcrGt_fzMCfFJLkOfxn2bFypDuz1dg@mail.gmail.com>
	<805163.1623878495@sss.pgh.pa.us>

Tom Lane schreef op wo 16-06-2021 om 17:21 [-0400]:
> 
> When you select from a view, you need permissions only on the view.
> The view's owner needs permissions on the underlying table(s).
> This is so that views can act as permission gateways.

additionally,
if you want to allow modifications through this view,
have a look at 'with check option' to avoid unwanted permission side-
effects

> 
> 			regards, tom lane
> 
> 
-- 
mvg,
Wim Bertels









view thread (7+ messages)

Message-ID: <efa9c36e5050bca1cde2e57b9b2c10f1a7535d36.camel@ucll.be>
Permalink:  ../efa9c36e5050bca1cde2e57b9b2c10f1a7535d36.camel@ucll.be/
Also on:    postgresql.org/message-id/efa9c36e5050bca1cde2e57b9b2c10f1a7535d36.camel@ucll.be

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: wim.bertels@ucll.be, wells.oliver@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: Baffled by basic permission issue.
  In-Reply-To: <efa9c36e5050bca1cde2e57b9b2c10f1a7535d36.camel@ucll.be>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox