From: Lars Erik Thorsplass <thorsplass@gmail.com>
To: pgsql-sql@postgresql.org
Subject: Stored procedures and "pseudo" fields..
Date: Tue, 20 Jul 2004 15:34:20 +0200
Message-ID: <7eeb33a04072006342b5d35a0@mail.gmail.com> (raw)
In-Reply-To: <7eeb33a040720034319e036c6@mail.gmail.com>
References: <7eeb33a040720034319e036c6@mail.gmail.com>
I also posted this to the general list, which might not have been a
suitable forum.
--
I have recently ventured into the exciting world of stored procedures,
but I have now become lost.
Background:
Am currently working on access control in a web application. My goal
is to process access control on the SQL level. This way if a row is in
the result set, you have access to it, if not, you don't.
Problem:
My stored procedure "acl_check()" takes two integers as parameters.
Param1 is the object id to check acl on, Param 2 is the object id of
the user currently using the system. The procedure returns a positive
number (1 or 3 ) if you have some kind of access to the object. As one
might understand I want the returned value from the acl_check()
procedure to be a part of the result set.
Kinda like this:
SELECT *, acl_check( objects.obid, <user_id> ) AS mode FROM objects
WHERE mode > 0;
This gives me a: ERROR: column "mode" does not exist
If I remove the "mode > 0" logic, I get a result set with mode in it as
expected. Why cant I do logic tests with the mode "field" ?
I tried a different approach with a different error:
SELECT * FROM objects, acl_check( objects.obid, 32 ) as mode WHERE mode > 0;
This gives me a: ERROR: function expression in FROM may not refer to
other relations of same query level.
Here objecs.obid is unknown i suppose, but if I enter "10" as the
first param using the mode "field" in a logic statement works.
I would appreciate any hints to a workaround which would enable me to
accomplish my scenario.
Best regards,
L.E.Thorsplass
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: thorsplass@gmail.com
Subject: Re: Stored procedures and "pseudo" fields..
In-Reply-To: <7eeb33a04072006342b5d35a0@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox