From: Robert Haas <robertmhaas@gmail.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Stephen Frost <sfrost@snowman.net>
Cc: Nikhil Sontakke <nikhil.sontakke@enterprisedb.com>
Cc: Petr Jelinek <pjmodos@pjmodos.net>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: GRANT ON ALL IN schema
Date: Wed, 5 Aug 2009 12:51:41 -0400
Message-ID: <603c8f070908050951s3e5df452se4c610f01b80bb7d@mail.gmail.com> (raw)
In-Reply-To: <20810.1249490458@sss.pgh.pa.us>
References: <4A37BF63.50008@pjmodos.net>
<4A38A956.8080600@pjmodos.net>
<4A4DE104.8090605@pjmodos.net>
<a301bfd90907170254re7dd52es9fedb007376d8055@mail.gmail.com>
<4A6059B4.5010004@pjmodos.net>
<4A607997.3030305@pjmodos.net>
<603c8f070907191628r6929055coe7627726a33ed143@mail.gmail.com>
<a301bfd90907192312s17e1b16cy3bcd6e0876960c04@mail.gmail.com>
<603c8f070908050932m19e7db65u9dab6d8001c5a237@mail.gmail.com>
<20810.1249490458@sss.pgh.pa.us>
On Wed, Aug 5, 2009 at 12:40 PM, Tom Lane<tgl@sss.pgh.pa.us> wrote:
> Robert Haas <robertmhaas@gmail.com> writes:
>> My understanding is that this patch will need to be reworked as well
>> based on Tom's comments on "DefaultACLs". Does that sound right?
>> Should we expect a new version this week, or defer this until the
>> September CommitFest?
>
> I was planning to go review that patch too, even though it's presumably
> not committable yet.
OK, that's good information, thanks.
> I'm not sure whether there is consensus on not using GRANT ON VIEW
> (ie, having these patches treat tables and views alike). I was waiting
> to see if Stephen would put forward a convincing counterargument ...
The argument is better for defaults that it is for grant on all, I
think, though we also don't want the two to be asymmetric. Defaults
need to be really simple to have any value, I think, and avoid
violating the POLA. But bulk-grant could be based on object type,
object name (with wildcard or regexp pattern), schema membership, or
maybe other things, and I think that would be quite useful if we can
figure out how to make it clean and elegant.
...Robert
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: robertmhaas@gmail.com, tgl@sss.pgh.pa.us, sfrost@snowman.net, nikhil.sontakke@enterprisedb.com, pjmodos@pjmodos.net
Subject: Re: GRANT ON ALL IN schema
In-Reply-To: <603c8f070908050951s3e5df452se4c610f01b80bb7d@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox