Message-ID: <4A808D44.7010600@agliodbs.com>
Date: Mon, 10 Aug 2009 14:12:36 -0700
From: Josh Berkus <josh@agliodbs.com>
Organization: PostgreSQL Experts Inc.
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US;
	rv:1.9.1b3pre) Gecko/20090223 Thunderbird/3.0b2
MIME-Version: 1.0
To: Heikki Linnakangas <heikki.linnakangas@enterprisedb.com>
CC: Tom Lane <tgl@sss.pgh.pa.us>, Andrew Dunstan <andrew@dunslane.net>,
	Kevin Grittner <Kevin.Grittner@wicourts.gov>,
	Peter Eisentraut <peter_e@gmx.net>, pgsql-hackers@postgresql.org,
	Nikhil Sontakke <nikhil.sontakke@enterprisedb.com>,
	Robert Haas <robertmhaas@gmail.com>,
	Petr Jelinek <pjmodos@pjmodos.net>, Stephen Frost <sfrost@snowman.net>
Subject: Re: GRANT ON ALL IN schema
References: <4A37BF63.50008@pjmodos.net>
	<603c8f070908050951s3e5df452se4c610f01b80bb7d@mail.gmail.com>
	<21246.1249491592@sss.pgh.pa.us>
	<200908101042.35024.peter_e@gmx.net>
	<4A7FE7F902000025000296E3@gw.wicourts.gov>
	<4A803A89.9020509@dunslane.net> <3285.1249918596@sss.pgh.pa.us>
	<4A808A6C.9060602@enterprisedb.com>
In-Reply-To: <4A808A6C.9060602@enterprisedb.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit


> Something like
> DO $$ begin ...; end $$;
> 
> gives 90% of the usability with 10% of the trouble.

I'd be a big fan of this.  Especially if we could at an \e for it in
psql.  \ec?

I'm not agreeing, though, that we don't need a GRANT ALL/ALTER DEFAULT.
 We still need that for the simplest cases so that novice-level users
will use *some* access control.  But it would mean that we wouldn't need
GRANT ALL/ALTER DEFAULT to support anything other than the simplest cases.

-- 
Josh Berkus
PostgreSQL Experts Inc.
www.pgexperts.com