Message-ID: <4A37BF63.50008@pjmodos.net>
Date: Tue, 16 Jun 2009 17:50:59 +0200
From: Petr Jelinek <pjmodos@pjmodos.net>
User-Agent: Thunderbird 2.0.0.21 (Windows/20090302)
MIME-Version: 1.0
To: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: GRANT ON ALL IN schema
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 7bit

Hi all,

I am thinking about implementing GRANT ON ALL TABLES IN schema TODO 
item. I saw many people sending proposals to the list but nobody seemed 
to actually do anything. I have few questions and problems to iron out 
before I can start the implementation. I would also like to note that I 
am not going to implement the second part (GRANT ON NEW TABLES) of the 
proposed TODO item as there seems to be better solution to this which is 
Default ACLs (http://wiki.postgresql.org/wiki/DefaultACL) - btw is 
anybody working on that ? If not I am interested in doing it also as a 
complementary patch to this one.

Anyway back to my thoughts about this patch. First of all I see problem 
with the proposed syntax. For this syntax I think TABLES (FUNCTIONS, 
SEQUENCES, etc) would have to be added to keywords which is problematic 
because there are views named tables, sequences, views in 
information_schema so we can't really make them keywords. I have no idea 
how to get around this and I don't see good alternative syntax either. 
This is main and only real problem I have.

The other stuff is minor, like do we want this only for tables, 
sequences, functions and views or do we want it for every object for 
which we have GRANT command. Also in standard GRANT there is no 
distinction between table and view, I guess in this case there should be.

-- 
Regards
Petr Jelinek (PJMODOS)