Message-ID: <444DEE78.7020703@archonet.com>
Date: Tue, 25 Apr 2006 10:40:08 +0100
From: Richard Huxton <dev@archonet.com>
User-Agent: Thunderbird 1.5 (X11/20051201)
MIME-Version: 1.0
To: Friends <ramasamy.p@gmail.com>
Cc: pgsql-performance@postgresql.org
Subject: Re: security for row level but not based on Database user's
References: <1145615328.300612.56380@e56g2000cwe.googlegroups.com>
In-Reply-To: <1145615328.300612.56380@e56g2000cwe.googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Friends wrote:
> Hi
> 
> I need to set security for row level but not based on Database user's
> login. It should be based on the user table login. For the particular
> user I need to allow only the particular records to access insert,
> update delete and select.

Well, the data access stuff is all manageable via views, which is the 
standard way to do this.

You don't say which version of PostgreSQL you are using, but I'd be 
tempted just to switch to a different user after connecting and use the 
session_user system function to control what is visible in the view.

For example:
CREATE VIEW my_contacts AS SELECT * FROM contacts WHERE owner = 
session_user;

If that's not practical then you'll need to write some functions to 
simulate your own session_user (say application_user()). This is easiest 
to write in plperl/pltcl or some other interpreted language - check the 
list archvies for plenty of discussion.

-- 
   Richard Huxton
   Archonet Ltd