From: Hiroshi Inoue <Inoue@tpf.co.jp>
To: Constantin Teodorescu <teo@flex.ro>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Ed Loehr <eloehr@austin.rr.com>
Cc: PostgreSQL Interfaces <pgsql-interfaces@postgreSQL.org>
Subject: RE: [INTERFACES] A question on triggers
Date: Sun, 20 Feb 2000 00:15:29 +0900
Message-ID: <NDBBIJLOILGIKBGDINDFMENLCCAA.Inoue@tpf.co.jp> (raw)
In-Reply-To: <38AC3840.EB320B34@flex.ro>
> -----Original Message-----
> From: owner-pgsql-interfaces@postgreSQL.org
> [mailto:owner-pgsql-interfaces@postgreSQL.org]On Behalf Of
> Constantin Teodorescu
>
> Tom Lane wrote:
> >
> > > But wouldn't be nice if PostgreSQL could offer a more elegant
> solution?
> >
> > Can't you do it with the normal GRANT/REVOKE access-control mechanism?
>
> No. It didn't worked, that was my first idea!
>
> > I'm pretty sure that for rules (views), the access rights for queries
> > issued within the rule are checked based on the owner of the rule, not
> > the user who invoked the rule. Triggers ought to work the same way,
> > though I haven't tried it. So you could make the trigger function and
> > the protected table owned by the same user, and then not grant write
> > permission on that table to anyone else.
>
> It seems it didn't work!
>
Hmm,it seems to work for views(rules) but it doesn't work for functions.
It should work for stored procedures,shouldn't it ?
Regards.
Hiroshi Inoue
Inoue@tpf.co.jp
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: Inoue@tpf.co.jp, teo@flex.ro, tgl@sss.pgh.pa.us, eloehr@austin.rr.com
Subject: RE: [INTERFACES] A question on triggers
In-Reply-To: <NDBBIJLOILGIKBGDINDFMENLCCAA.Inoue@tpf.co.jp>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox