X-Original-To: pgsql-bugs-postgresql.org@localhost.postgresql.org Received: from localhost (unknown [200.46.204.144]) by svr1.postgresql.org (Postfix) with ESMTP id 8085453DA5 for ; Fri, 22 Apr 2005 03:33:17 -0300 (ADT) Received: from svr1.postgresql.org ([200.46.204.71]) by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024) with ESMTP id 23487-07 for ; Fri, 22 Apr 2005 06:33:12 +0000 (GMT) Received: from petrel.telecom.mipt.ru (petrel.telecom.mipt.ru [193.125.143.140]) by svr1.postgresql.org (Postfix) with ESMTP id 2A1CF53DBF for ; Fri, 22 Apr 2005 03:33:11 -0300 (ADT) Received: from [127.0.0.1] (localhost [127.0.0.1]) by petrel.telecom.mipt.ru (Postfix) with ESMTP id 5B9CD252B8641; Fri, 22 Apr 2005 10:33:10 +0400 (MSD) Message-ID: <42689AA6.6080007@mipt.ru> Date: Fri, 22 Apr 2005 10:33:10 +0400 From: Olleg Samoylov Organization: Moscow Institute of Physics and Technology User-Agent: Debian Thunderbird 1.0.2 (X11/20050402) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Richard Huxton Cc: pgsql-bugs@postgresql.org Subject: Re: BUG #1610: rewrite rule and sequence References: <20050421121944.15E03F0B53@svr2.postgresql.org> <4267CD7F.3090100@archonet.com> In-Reply-To: <4267CD7F.3090100@archonet.com> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms040701020108090606070101" X-Virus-Scanned: by amavisd-new at hub.org X-Spam-Status: No, hits=0.025 tagged_above=0 required=5 tests=AWL X-Spam-Level: X-Archive-Number: 200504/161 X-Sequence-Number: 11613 This is a cryptographically signed message in MIME format. --------------ms040701020108090606070101 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Richard Huxton wrote: > That's not a bug, it's a feature (as they say). I suppose you could > argue that a sequence only used by one table could inherit that > table's permissions by default, but I can see problems when people > reorder GRANT statements. > > HTH It's not feature, it's bug. From postgresql documentation 33.4. Rules and Privileges: Relations that are used due to rules get checked against the privileges of the rule owner, not the user invoking the rule. This means that a user only needs the required privileges for the tables/views that he names explicitly in his queries. This dont' true for tables with serial fields. -- Olleg Samoylov --------------ms040701020108090606070101 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILHDCC BYowggRyoAMCAQICAQQwDQYJKoZIhvcNAQEEBQAwgeMxCzAJBgNVBAYTAlJVMRYwFAYDVQQI Ew1Nb3Njb3cgcmVnaW9uMRQwEgYDVQQHEwtEb2xnb3BydWRueTFGMEQGA1UEChM9TW9zY293 IEluc3RpdHV0ZSBvZiBQaHlzaWNzIGFuZCBUZWNobm9sb2d5IChTdGF0ZSBVbml2ZXJzaXR5 KTEQMA4GA1UECxMHVGVsZWNvbTEdMBsGA1UEAxMUTUlQVCBUZWxlY29tIFJvb3QgQ0ExLTAr BgkqhkiG9w0BCQEWHk1JUFQgVGVsZWNvbSA8dGVsZWNvbUBtaXB0LnJ1PjAeFw0wNDA0MTYw OTE1MzBaFw0wNTA1MjEwOTE1MzBaMIG2MQswCQYDVQQGEwJSVTEWMBQGA1UECBMNTW9zY293 IHJlZ2lvbjFGMEQGA1UEChM9TW9zY293IEluc3RpdHV0ZSBvZiBQaHlzaWNzIGFuZCBUZWNo bm9sb2d5IChTdGF0ZSBVbml2ZXJzaXR5KTEQMA4GA1UECxMHVGVsZWNvbTEXMBUGA1UEAxMO T2xsZWcgU2Ftb3lsb3YxHDAaBgkqhkiG9w0BCQEWDW9sbGVnQG1pcHQucnUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KQ5jnmerWUyHmUpK0AyF0wTM63jUBtjeu7CJnRiD y/aMGaaZrFb7ARZ1Pa1BplUCYU/y5KkM+WaYvvUTNETTJxYgTLGW+HFoXLKT+iAW/xTGIt8X e9q7+C6R7+P7ffyc8TwdPkZWpXN5gylIbfCjvzcBB9d8TqXQWG93NtJvut1uQmLg37kKpHDv z3+d9OJ6+X3mlNOgm32NuSXNqXkahHSofqMbQosltijBnn5n7VGY68NOrNENwv5L6Fr5PWfs IF0ckRS1gkPfpSezT27GdQwVuYKkqGLNTSM+KkdWeY0iDYy7M8BhBn+PPpUbRE//8dJVIxRg pmiJcE+4J6G9AgMBAAGjggFyMIIBbjAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVu U1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUbwmSSHp4RwoImbeQupkzlrWN gZwwggESBgNVHSMEggEJMIIBBYAUGU8ELdohM+B3QiqpwBIAzdB/hbGhgemkgeYwgeMxCzAJ BgNVBAYTAlJVMRYwFAYDVQQIEw1Nb3Njb3cgcmVnaW9uMRQwEgYDVQQHEwtEb2xnb3BydWRu eTFGMEQGA1UEChM9TW9zY293IEluc3RpdHV0ZSBvZiBQaHlzaWNzIGFuZCBUZWNobm9sb2d5 IChTdGF0ZSBVbml2ZXJzaXR5KTEQMA4GA1UECxMHVGVsZWNvbTEdMBsGA1UEAxMUTUlQVCBU ZWxlY29tIFJvb3QgQ0ExLTArBgkqhkiG9w0BCQEWHk1JUFQgVGVsZWNvbSA8dGVsZWNvbUBt aXB0LnJ1PoIBADANBgkqhkiG9w0BAQQFAAOCAQEAPcQ/XPYan34EDNmXucncg8zmmOb6VnHp vEGjwkVSe3AnMJH9ptBrkMAzPZepAjfq1VVawbYV5vdhztCZF1W59IlwauqNymFzU/j+W4AW jzRfZqDV1YANw7KvsRdm+rnWZ7A924zHtIbqcWC52YB+vM4tdA284RBMm/Z8tKwsiBZYqvlp JUN/6xXYMQKTI/PK03/i3P+45fjdlAcmrsv4CpBa3rR8c9kCX5jM0wezoEakbnAYADYjGfns BhNrSqeMYu+Z0uiJaW/Liaub6/C4WcxzJl5xGU0uaY9kiLDou6arQueNjUw2x2xuAeARLag8 AAnZmBjr4/VQQTEGINsf6jCCBYowggRyoAMCAQICAQQwDQYJKoZIhvcNAQEEBQAwgeMxCzAJ BgNVBAYTAlJVMRYwFAYDVQQIEw1Nb3Njb3cgcmVnaW9uMRQwEgYDVQQHEwtEb2xnb3BydWRu eTFGMEQGA1UEChM9TW9zY293IEluc3RpdHV0ZSBvZiBQaHlzaWNzIGFuZCBUZWNobm9sb2d5 IChTdGF0ZSBVbml2ZXJzaXR5KTEQMA4GA1UECxMHVGVsZWNvbTEdMBsGA1UEAxMUTUlQVCBU ZWxlY29tIFJvb3QgQ0ExLTArBgkqhkiG9w0BCQEWHk1JUFQgVGVsZWNvbSA8dGVsZWNvbUBt aXB0LnJ1PjAeFw0wNDA0MTYwOTE1MzBaFw0wNTA1MjEwOTE1MzBaMIG2MQswCQYDVQQGEwJS VTEWMBQGA1UECBMNTW9zY293IHJlZ2lvbjFGMEQGA1UEChM9TW9zY293IEluc3RpdHV0ZSBv ZiBQaHlzaWNzIGFuZCBUZWNobm9sb2d5IChTdGF0ZSBVbml2ZXJzaXR5KTEQMA4GA1UECxMH VGVsZWNvbTEXMBUGA1UEAxMOT2xsZWcgU2Ftb3lsb3YxHDAaBgkqhkiG9w0BCQEWDW9sbGVn QG1pcHQucnUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KQ5jnmerWUyHmUpK 0AyF0wTM63jUBtjeu7CJnRiDy/aMGaaZrFb7ARZ1Pa1BplUCYU/y5KkM+WaYvvUTNETTJxYg TLGW+HFoXLKT+iAW/xTGIt8Xe9q7+C6R7+P7ffyc8TwdPkZWpXN5gylIbfCjvzcBB9d8TqXQ WG93NtJvut1uQmLg37kKpHDvz3+d9OJ6+X3mlNOgm32NuSXNqXkahHSofqMbQosltijBnn5n 7VGY68NOrNENwv5L6Fr5PWfsIF0ckRS1gkPfpSezT27GdQwVuYKkqGLNTSM+KkdWeY0iDYy7 M8BhBn+PPpUbRE//8dJVIxRgpmiJcE+4J6G9AgMBAAGjggFyMIIBbjAJBgNVHRMEAjAAMCwG CWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU bwmSSHp4RwoImbeQupkzlrWNgZwwggESBgNVHSMEggEJMIIBBYAUGU8ELdohM+B3QiqpwBIA zdB/hbGhgemkgeYwgeMxCzAJBgNVBAYTAlJVMRYwFAYDVQQIEw1Nb3Njb3cgcmVnaW9uMRQw EgYDVQQHEwtEb2xnb3BydWRueTFGMEQGA1UEChM9TW9zY293IEluc3RpdHV0ZSBvZiBQaHlz aWNzIGFuZCBUZWNobm9sb2d5IChTdGF0ZSBVbml2ZXJzaXR5KTEQMA4GA1UECxMHVGVsZWNv bTEdMBsGA1UEAxMUTUlQVCBUZWxlY29tIFJvb3QgQ0ExLTArBgkqhkiG9w0BCQEWHk1JUFQg VGVsZWNvbSA8dGVsZWNvbUBtaXB0LnJ1PoIBADANBgkqhkiG9w0BAQQFAAOCAQEAPcQ/XPYa n34EDNmXucncg8zmmOb6VnHpvEGjwkVSe3AnMJH9ptBrkMAzPZepAjfq1VVawbYV5vdhztCZ F1W59IlwauqNymFzU/j+W4AWjzRfZqDV1YANw7KvsRdm+rnWZ7A924zHtIbqcWC52YB+vM4t dA284RBMm/Z8tKwsiBZYqvlpJUN/6xXYMQKTI/PK03/i3P+45fjdlAcmrsv4CpBa3rR8c9kC X5jM0wezoEakbnAYADYjGfnsBhNrSqeMYu+Z0uiJaW/Liaub6/C4WcxzJl5xGU0uaY9kiLDo u6arQueNjUw2x2xuAeARLag8AAnZmBjr4/VQQTEGINsf6jGCBMIwggS+AgEBMIHpMIHjMQsw CQYDVQQGEwJSVTEWMBQGA1UECBMNTW9zY293IHJlZ2lvbjEUMBIGA1UEBxMLRG9sZ29wcnVk bnkxRjBEBgNVBAoTPU1vc2NvdyBJbnN0aXR1dGUgb2YgUGh5c2ljcyBhbmQgVGVjaG5vbG9n eSAoU3RhdGUgVW5pdmVyc2l0eSkxEDAOBgNVBAsTB1RlbGVjb20xHTAbBgNVBAMTFE1JUFQg VGVsZWNvbSBSb290IENBMS0wKwYJKoZIhvcNAQkBFh5NSVBUIFRlbGVjb20gPHRlbGVjb21A bWlwdC5ydT4CAQQwCQYFKw4DAhoFAKCCAq0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMDUwNDIyMDYzMzEwWjAjBgkqhkiG9w0BCQQxFgQUtV7UUZGbnQzq QDTGSfj6QLBnhGcwUgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgIC AIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgfoGCSsGAQQBgjcQ BDGB7DCB6TCB4zELMAkGA1UEBhMCUlUxFjAUBgNVBAgTDU1vc2NvdyByZWdpb24xFDASBgNV BAcTC0RvbGdvcHJ1ZG55MUYwRAYDVQQKEz1Nb3Njb3cgSW5zdGl0dXRlIG9mIFBoeXNpY3Mg YW5kIFRlY2hub2xvZ3kgKFN0YXRlIFVuaXZlcnNpdHkpMRAwDgYDVQQLEwdUZWxlY29tMR0w GwYDVQQDExRNSVBUIFRlbGVjb20gUm9vdCBDQTEtMCsGCSqGSIb3DQEJARYeTUlQVCBUZWxl Y29tIDx0ZWxlY29tQG1pcHQucnU+AgEEMIH8BgsqhkiG9w0BCRACCzGB7KCB6TCB4zELMAkG A1UEBhMCUlUxFjAUBgNVBAgTDU1vc2NvdyByZWdpb24xFDASBgNVBAcTC0RvbGdvcHJ1ZG55 MUYwRAYDVQQKEz1Nb3Njb3cgSW5zdGl0dXRlIG9mIFBoeXNpY3MgYW5kIFRlY2hub2xvZ3kg KFN0YXRlIFVuaXZlcnNpdHkpMRAwDgYDVQQLEwdUZWxlY29tMR0wGwYDVQQDExRNSVBUIFRl bGVjb20gUm9vdCBDQTEtMCsGCSqGSIb3DQEJARYeTUlQVCBUZWxlY29tIDx0ZWxlY29tQG1p cHQucnU+AgEEMA0GCSqGSIb3DQEBAQUABIIBACAcaBGCI01RTlXbsPXQhRqbA2Yo7UEamlT+ prlG1xkWxabEz5nQrkhPmYrGEbR5TEVTq8Q56HUipIt1/nhG7KuJO5nLgVQ8G3UTb1gCETVj C7dfaSe17w9oTRRC4CQdsMz2mtiZ0uMiM2ljh1ayZ5ETQ7E2CSxCMsta1LaMWW0WifChx+uj /KkZDekzBeh57So0uNM3hRcdAIQUB/43TRbwjEVa2VYOFgA29pIBaw2RLqXbsDkcPQb+Qh9D V+wDxj6gShdsBwdcrNHLzwxMMlkb3Fy9zGmh6jvh07sh6752qJUe3u2Zh9BkDdTQM/i3mipb oY/DGdc2o99FQlybFe0AAAAAAAA= --------------ms040701020108090606070101--