From: Stephen Frost <sfrost@snowman.net>
To: Josh Berkus <josh@agliodbs.com>
Cc: Heikki Linnakangas <heikki.linnakangas@enterprisedb.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Andrew Dunstan <andrew@dunslane.net>
Cc: Kevin Grittner <Kevin.Grittner@wicourts.gov>
Cc: Peter Eisentraut <peter_e@gmx.net>
Cc: pgsql-hackers@postgresql.org, Nikhil Sontakke <nikhil.sontakke@enterprisedb.com>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: Petr Jelinek <pjmodos@pjmodos.net>
Subject: Re: GRANT ON ALL IN schema
Date: Mon, 10 Aug 2009 17:28:42 -0400
Message-ID: <20090810212842.GR23840@tamriel.snowman.net> (raw)
In-Reply-To: <4A808D44.7010600@agliodbs.com>
References: <4A37BF63.50008@pjmodos.net>
<603c8f070908050951s3e5df452se4c610f01b80bb7d@mail.gmail.com>
<21246.1249491592@sss.pgh.pa.us>
<200908101042.35024.peter_e@gmx.net>
<4A7FE7F902000025000296E3@gw.wicourts.gov>
<4A803A89.9020509@dunslane.net>
<3285.1249918596@sss.pgh.pa.us>
<4A808A6C.9060602@enterprisedb.com>
<4A808D44.7010600@agliodbs.com>
* Josh Berkus (josh@agliodbs.com) wrote:
> I'm not agreeing, though, that we don't need a GRANT ALL/ALTER DEFAULT.
> We still need that for the simplest cases so that novice-level users
> will use *some* access control. But it would mean that we wouldn't need
> GRANT ALL/ALTER DEFAULT to support anything other than the simplest cases.
I agree with Josh. That's also why I feel the schema or namespace-driven
grant/defaults make the most sense. I feel like it's the most natural
and intuitive option. Having a default for roles is a neat idea, but I
don't believe they'd be used much and would require having a precedence
or merging them, neither of which I like.
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 196B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: sfrost@snowman.net, josh@agliodbs.com, heikki.linnakangas@enterprisedb.com, tgl@sss.pgh.pa.us, andrew@dunslane.net, Kevin.Grittner@wicourts.gov, peter_e@gmx.net, nikhil.sontakke@enterprisedb.com, robertmhaas@gmail.com, pjmodos@pjmodos.net
Subject: Re: GRANT ON ALL IN schema
In-Reply-To: <20090810212842.GR23840@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox