agora inbox for pgsql-sql@postgresql.org
help / color / mirror / Atom feedmultiple roles for a user ?
4+ messages / 4 participants
[nested] [flat]
* multiple roles for a user ?
@ 2018-11-05 11:15 DECHERF Étienne <etienne.decherf-ext@aphp.fr>
0 siblings, 2 replies; 4+ messages in thread
From: DECHERF Étienne @ 2018-11-05 11:15 UTC (permalink / raw)
To: pgsql-sql@lists.postgresql.org <pgsql-sql@lists.postgresql.org>
Hello,
I have a simple question to ask :
Is it possible to give multiple roles to the same user?
for example :
1. a general role "RoleA" for most users, for "grants and revokes" on certain tables and certain columns.
2. plus a role "Role_user" particular for each of them for its additional personal access
with "grants" and "revokes" on other tables and columns.
Thanks.
Regards.
Etienne DECHERF
SOPRA STERIA
for APHP Paris
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: multiple roles for a user ?
@ 2018-11-05 13:03 Stanton Schmidt <sschmidt@rgllogistics.com>
parent: DECHERF Étienne <etienne.decherf-ext@aphp.fr>
1 sibling, 0 replies; 4+ messages in thread
From: Stanton Schmidt @ 2018-11-05 13:03 UTC (permalink / raw)
To: DECHERF Étienne <etienne.decherf-ext@aphp.fr>; +Cc: pgsql-sql <pgsql-sql@lists.postgresql.org>
Yes it is.
stanton schmidt
Database Administrator
direct. [ callto:920.884.1281 | 920. ] 471.4495 cell 920.660.1828
RGL
GO AHEAD. ASK WHAT IF.
[ http://www.rgllogistics.com/ | www.RGLlogistics.co m ]
From: "DECHERF Étienne" <etienne.decherf-ext@aphp.fr>
To: "pgsql-sql" <pgsql-sql@lists.postgresql.org>
Sent: Monday, November 5, 2018 5:15:08 AM
Subject: multiple roles for a user ?
Hello,
I have a simple question to ask :
Is it possible to give multiple roles to the same user?
for example :
1. a general role "RoleA" for most users, for "grants and revokes" on certain tables and certain columns.
2. plus a role "Role_user" particular for each of them for its additional personal access
with "grants" and "revokes" on other tables and columns .
Thanks.
Regards.
Etienne DECHERF
SOPRA STERIA
for APHP Paris
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: multiple roles for a user ?
@ 2018-11-05 13:25 Guillaume Lelarge <guillaume@lelarge.info>
parent: DECHERF Étienne <etienne.decherf-ext@aphp.fr>
1 sibling, 1 reply; 4+ messages in thread
From: Guillaume Lelarge @ 2018-11-05 13:25 UTC (permalink / raw)
To: etienne.decherf-ext@aphp.fr; +Cc: pgsql-sql@lists.postgresql.org
Le lun. 5 nov. 2018 à 12:15, DECHERF Étienne <etienne.decherf-ext@aphp.fr>
a écrit :
> Hello,
> I have a simple question to ask :
>
> Is it possible to give multiple roles to the same user?
>
> for example :
> 1. a general role "RoleA" for most users, for "grants and revokes" on certain tables and certain columns.
>
> 2. plus a role "Role_user" particular for each of them for its additional personal access
> with "grants" and "revokes" on other tables and columns.
>
>
Yes, though you can only grant privileges this way. Not revoke some.
--
Guillaume.
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: multiple roles for a user ?
@ 2018-11-05 15:08 David G. Johnston <david.g.johnston@gmail.com>
parent: Guillaume Lelarge <guillaume@lelarge.info>
0 siblings, 0 replies; 4+ messages in thread
From: David G. Johnston @ 2018-11-05 15:08 UTC (permalink / raw)
To: Guillaume Lelarge <guillaume@lelarge.info>; +Cc: etienne.decherf-ext@aphp.fr, pgsql-sql <pgsql-sql@lists.postgresql.org>
On Mon, Nov 5, 2018 at 6:25 AM Guillaume Lelarge <guillaume@lelarge.info> wrote:
>
> Le lun. 5 nov. 2018 à 12:15, DECHERF Étienne <etienne.decherf-ext@aphp.fr> a écrit :
>>
>> 2. plus a role "Role_user" particular for each of them for its additional personal access
>>
>> with "grants" and "revokes" on other tables and columns.
>> Yes, though you can only grant privileges this way. Not revoke some.
Phrased differently, "REVOKE" removes a previously GRANT'd permission;
it does not setup a "denial of permission". The permission system in
PostgreSQL is purely additive - roles start with zero permissions are
strictly granted the ability to do things. You have to revoke
permissions where they are granted originally when inheritance is in
play.
David J.
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2018-11-05 15:08 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2018-11-05 11:15 multiple roles for a user ? DECHERF Étienne <etienne.decherf-ext@aphp.fr>
2018-11-05 13:03 ` Stanton Schmidt <sschmidt@rgllogistics.com>
2018-11-05 13:25 ` Guillaume Lelarge <guillaume@lelarge.info>
2018-11-05 15:08 ` David G. Johnston <david.g.johnston@gmail.com>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox