Re: Referential integrity question

From: "William H(dot) Geiger III" <whgiii(at)openpgp(dot)net>
To: "Raymond O'Donnell" <rod(at)iol(dot)ie>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Referential integrity question
Date: 2000-11-05 18:07:47
Message-ID: 200011051912.OAA28683@domains.invweb.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

In <200011051615(dot)QAA78279(at)mail(dot)iol(dot)ie>, on 11/05/00
at 10:12 AM, "Raymond O'Donnell" <rod(at)iol(dot)ie> said:

>Hi all,

>Is this normal? - I have discovered the hard way that permissions
>GRANTed to a user on one table influence that user's ability to update
>another table in a foreign key relationship with it. To be specific,
>here are the relevant bits of the two tables:

>create table usertypes (
> typecode varchar(16) primary key,
> description varchar(64),
>);

>grant select on usertypes to webanon;

>create table users (
> uid varchar(16) primary key,
> pwd varchar(16),
> typecode varchar(16) references usertypes
> on update cascade
>);

>grant select,insert,update,delete on users to webanon;

>Now, when user webanon tries to update a field in table "users", the
>update doesn't happen.....however, it DOES happen if I grant update
>permissions to webanon on table "usertypes".

>Any comments welcome! - Many thanks.

If I am looking at this you wouldn't want webanon to be able to update
table "usertypes". Table "usertypes" is a lookup table and as such should
not be modified by any entries in table "users".

How do you have the relationship between the two tables set up?

--
---------------------------------------------------------------
William H. Geiger III http://www.openpgp.net
Geiger Consulting

Data Security & Cryptology Consulting
Programming, Networking, Analysis

PGP for OS/2: http://www.openpgp.net/pgp.html
E-Secure: http://www.openpgp.net/esecure.html
---------------------------------------------------------------

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Stephan Szabo 2000-11-05 18:59:21 Re: Referential integrity question
Previous Message Raymond O'Donnell 2000-11-05 16:12:38 Referential integrity question