From: Markus Schaber <schabi@logix-tt.com>
To: pgsql-sql@postgresql.org
Cc: pgsql-admin@postgresql.org
Cc: pgsql-general@postgresql.org
Cc: pgsql-jdbc@postgresql.org
Subject: Re: [JDBC] Thoughts on a Isolation/Security problem.
Date: Tue, 18 Apr 2006 11:58:12 +0200
Message-ID: <4444B834.1030107@logix-tt.com> (raw)
In-Reply-To: <Pine.LNX.4.44.0604181230470.24609-100000@matrix.gatewaynet.com>
References: <Pine.LNX.4.44.0604181230470.24609-100000@matrix.gatewaynet.com>
Hi, Achilleus,
Achilleus Mantzios wrote:
> Now i am thinking of restructuring the whole architecture as:
> - Create one EAR app for every mgmt company
> - Create one DB USER for every mgmg company
> - Create one SCHEMA (same as the USER) for every mgmt company
> (mgmtcompany1,mgmtcompany2,etc...)
We're doing a very similar thing here for one of our legacy apps, which
luckily does not know anything about schemas, and so the search_path
trick does work.
However, for most "global" tables we have views with insert/update/
delete rules in the specific schemas, and such shield the application
from directly accessing the global data. We even need to mere local and
global data this way in some cases.
It is ugly, but it works fine and is manageable.
HTH,
Markus
--
Markus Schaber | Logical Tracking&Tracing International AG
Dipl. Inf. | Software Development GIS
Fight against software patents in EU! www.ffii.org www.nosoftwarepatents.org
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: schabi@logix-tt.com, pgsql-admin@postgresql.org, pgsql-general@postgresql.org, pgsql-jdbc@postgresql.org
Subject: Re: [JDBC] Thoughts on a Isolation/Security problem.
In-Reply-To: <4444B834.1030107@logix-tt.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox