Received: from localhost (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with ESMTP id 6844C475DA3 for ; Tue, 12 Nov 2002 12:12:57 -0500 (EST) Received: from smtp.ualg.pt (smtp.ualg.pt [193.136.224.8]) by postgresql.org (Postfix) with ESMTP id 4EECD475CED for ; Tue, 12 Nov 2002 12:12:56 -0500 (EST) Received: from localhost (smtp.ualg.pt [127.0.0.1]) by smtp.ualg.pt (Postfix) with ESMTP id 979FA4C390; Tue, 12 Nov 2002 17:13:00 +0000 (WET) Received: from ualg.pt (unknown [10.10.20.125]) by smtp.ualg.pt (Postfix) with ESMTP id 294C64BD0D; Tue, 12 Nov 2002 17:12:59 +0000 (WET) Message-ID: <3DD1368D.5040108@ualg.pt> Date: Tue, 12 Nov 2002 17:12:45 +0000 From: Luis Sousa User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1 MIME-Version: 1.0 To: Robert Treat Cc: Bruce Momjian , josh@agliodbs.com, pgsql-sql Subject: Re: Permission on insert rules References: <200211090240.gA92eX412402@candle.pha.pa.us> <1037033140.26585.34.camel@camel> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms060402060205040601070904" X-Virus-Scanned: by AMaViS new-20020517 X-Razor-id: dc98304169d2d428ed945e65e900d732103cb691 X-Virus-Scanned: by AMaViS new-20020517 X-Archive-Number: 200211/189 X-Sequence-Number: 10331 This is a cryptographically signed message in MIME format. --------------ms060402060205040601070904 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Robert Treat wrote: >On Fri, 2002-11-08 at 21:40, Bruce Momjian wrote: > > >>Josh Berkus wrote: >> >> >>>Luis, >>> >>> >>> >>>>Just a question. >>>>I'm writing some rules to insert/update some data in my database, and I >>>>gave all the privileges on that view to the user, and only select on the >>>>tables. >>>>When that user inserts data using the view, I thought that was user >>>>postgres that will do the rest ! But I got permission denied on those >>>>tables. >>>>The idea was to create a layer, with the views, giving to that user >>>>permission on views to insert and update, and not to tables. >>>>Is this possible ? >>>> >>>> >>>This is a known problem. >>> >>>I know that permissions for Functions has been addressed in 7.3. However, I >>>am not sure about permissions for updatable views. Tom, Bruce? >>> >>> >>Views have always had their own permissions. >> >> >> > >If the functions can fire as there creator instead of there caller, then >I would think as long as the creator has insert/update views on the base >table, you should be able to do updateable rules and give only >permissions to the view for the caller. (Though maybe you have to use >triggers rather than rules to do this?) Does that sound right? > >Robert Treat > > > > > > Is that the only way to do it ? Luis Sousa --------------ms060402060205040601070904 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEH AQAAoIIJPDCCAvwwggJloAMCAQICAwcgpDANBgkqhkiG9w0BAQQFADCBkjEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJ Q2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmlj YXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0Eg MjAwMC44LjMwMB4XDTAyMDQwMjEzNDYxNloXDTAzMDQwMjEzNDYxNlowQTEf MB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEeMBwGCSqGSIb3DQEJ ARYPbGxzb3VzYUB1YWxnLnB0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArq+CLmsIQV5pSRtuNd9sptT22gTUwt0UReWfSlCTApnNcGDQCiS8 nluhr5AWbJWhhIVHQETSKWlT+y09KsYf7AeW1zBQWSUJjhpCDYd8n+T0SxFl 24ZZJhZQ57kVJ7iNzJ7WPYQGk06zoRWgtnFcvVuA1az0vhwWHNk8+1JaCTeW lwjPRptJZ78CNiN2prAoEoI9m7/jUW6iTJmpNinzkIa1qpKEdPrCQM/dhuk6 JDl4qmiQ2a87I/aiRJCPtTBIl/Zt2Vjde5Br2qR8pWisjaoVl9ntJJvni9cl XJGk/uO4iwza7IL2K6PsRvbGAoswWKeEStK+A/WXoh1UXbHEyQIDAQABoyww KjAaBgNVHREEEzARgQ9sbHNvdXNhQHVhbGcucHQwDAYDVR0TAQH/BAIwADAN BgkqhkiG9w0BAQQFAAOBgQCee996SyMsQgWwQUrnHsmltoIMnkkLuWvWfWwq 3fqe8ZLpfvXvFg6Z52EtPZ8vlzp41KM1HQErW2dMe2DyUfbhaUqqNQBvf67V G8STIA+83VEKFK2njzIKpwLXOOjL0estNpcrE1azR/MTfvvu3adO6j5syXd6 pfm4elI2W0yLMzCCAvwwggJloAMCAQICAwcgpDANBgkqhkiG9w0BAQQFADCB kjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UE BxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRp ZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBS U0EgMjAwMC44LjMwMB4XDTAyMDQwMjEzNDYxNloXDTAzMDQwMjEzNDYxNlow QTEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEeMBwGCSqGSIb3 DQEJARYPbGxzb3VzYUB1YWxnLnB0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEArq+CLmsIQV5pSRtuNd9sptT22gTUwt0UReWfSlCTApnNcGDQ CiS8nluhr5AWbJWhhIVHQETSKWlT+y09KsYf7AeW1zBQWSUJjhpCDYd8n+T0 SxFl24ZZJhZQ57kVJ7iNzJ7WPYQGk06zoRWgtnFcvVuA1az0vhwWHNk8+1Ja CTeWlwjPRptJZ78CNiN2prAoEoI9m7/jUW6iTJmpNinzkIa1qpKEdPrCQM/d huk6JDl4qmiQ2a87I/aiRJCPtTBIl/Zt2Vjde5Br2qR8pWisjaoVl9ntJJvn i9clXJGk/uO4iwza7IL2K6PsRvbGAoswWKeEStK+A/WXoh1UXbHEyQIDAQAB oywwKjAaBgNVHREEEzARgQ9sbHNvdXNhQHVhbGcucHQwDAYDVR0TAQH/BAIw ADANBgkqhkiG9w0BAQQFAAOBgQCee996SyMsQgWwQUrnHsmltoIMnkkLuWvW fWwq3fqe8ZLpfvXvFg6Z52EtPZ8vlzp41KM1HQErW2dMe2DyUfbhaUqqNQBv f67VG8STIA+83VEKFK2njzIKpwLXOOjL0estNpcrE1azR/MTfvvu3adO6j5s yXd6pfm4elI2W0yLMzCCAzgwggKhoAMCAQICEGZFcrfMdPXPY3ZFhNAukQEw DQYJKoZIhvcNAQEEBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0 ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3Rl IENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMg RGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBD QTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNv bTAeFw0wMDA4MzAwMDAwMDBaFw0wNDA4MjcyMzU5NTlaMIGSMQswCQYDVQQG EwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQHEwlDYXBlIFRv d24xDzANBgNVBAoTBlRoYXd0ZTEdMBsGA1UECxMUQ2VydGlmaWNhdGUgU2Vy dmljZXMxKDAmBgNVBAMTH1BlcnNvbmFsIEZyZWVtYWlsIFJTQSAyMDAwLjgu MzAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN4zMqZjxwklRT7Sbngn Z4HF2ogZgpcO40QpimM1Km1wPPrcrvfudG8wvDOQf/k0caCjbZjxw0+iZdsN +kvx1t1hpfmFzVWaNRqdknWoJ67Ycvm6AvbXsJHeHOmr4BgDqHxDQlBRh4M8 8Dm0m1SKE4f/s5udSWYALQmJ7JRr6aFpAgMBAAGjTjBMMCkGA1UdEQQiMCCk HjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwxLTI5NzASBgNVHRMBAf8ECDAG AQH/AgEAMAsGA1UdDwQEAwIBBjANBgkqhkiG9w0BAQQFAAOBgQAxsUtHXfkB ceX1U2xdedY9mMAmE2KBIqcS+CKV6BtJtyd7BDm6/ObyJOuR+r3sDSo491BV qGz3Da1MG7wD9LXrokefbKIMWI0xQgkRbLAaadErErJAXWr5edDqLiXdiuT8 2w0fnQLzWtvKPPZE6iZph39Ins6ln+eE2MliYq0FxjGCAycwggMjAgEBMIGa MIGSMQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYD VQQHEwlDYXBlIFRvd24xDzANBgNVBAoTBlRoYXd0ZTEdMBsGA1UECxMUQ2Vy dGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMTH1BlcnNvbmFsIEZyZWVtYWls IFJTQSAyMDAwLjguMzACAwcgpDAJBgUrDgMCGgUAoIIBYTAYBgkqhkiG9w0B CQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wMjExMTIxNzEyNDVa MCMGCSqGSIb3DQEJBDEWBBTR5rdmwO28cTdLLW10OXFnwdku/jBSBgkqhkiG 9w0BCQ8xRTBDMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBrQYLKoZIhvcNAQkQ AgsxgZ2ggZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENh cGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYD VQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwg RnJlZW1haWwgUlNBIDIwMDAuOC4zMAIDByCkMA0GCSqGSIb3DQEBAQUABIIB AJvIk5i5/QwiXZCmizVRZGb/U/42HNLkCy3HkDcAiomU/0TLpGeNZiO8q2xW 0ueBVYD7nEb5UKMKwigJZzBD1Cwf82stVDbDUR9mTWASafbk0dE3u24xyXPP sMiqE00peC59KFp/83m3i7PUVy7teR8PbD4SoHtuTkwETWuKW2LHQObd1npJ nY+e8GmRNVAdyliRUnOz64qWByjU/WrAAbVC0fdjxK0iSaHX43/LSa2qyCzv lwt2cDK5F6Ek675HHQ9R64q6lJsMUO7X5y6dpNCbSJ9cjQmmvPD9sjiGZyPI U7A24g0m6y35vLAruE6yRgZ/PsLlqKpE3vnjhnLteHwAAAAAAAA= --------------ms060402060205040601070904--