Re: GRANT/REVOKE column-level privileges

From: Martijn van Oosterhout <kleptog(at)svana(dot)org>
To: kevin brintnall <kbrint(at)rufus(dot)net>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: GRANT/REVOKE column-level privileges
Date: 2006-01-13 10:20:52
Message-ID: 20060113102052.GB3689@svana.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Fri, Jan 13, 2006 at 03:37:32AM -0600, kevin brintnall wrote:
> Has anyone else taken a look at this? I thought I'd play around with the
> system catalog and see if I couldn't put an ACL column into pg_attribute:
>
> It ended up generating the following BKI line:
>
> insert ( 1249 attacl 1034 -1 -1 18 1 -1 -1 f x i f f f t 0 _null_ )

Umm, yes. You also need to add the column to the contents of
pg_attribute, give the attribute a number, increase the number of
attributes as stored in pg_class, update the #define that gives the
attribute count, change the macro that gives the size of the
pg_attribute structure (ATTRIBUTE_TUPLE_SIZE) and update all the places
that create the structure to store a null or something else in that
column.

At that, I think I missed some steps but this should get you a bit
further...

Good luck!
--
Martijn van Oosterhout <kleptog(at)svana(dot)org> http://svana.org/kleptog/
> Patent. n. Genius is 5% inspiration and 95% perspiration. A patent is a
> tool for doing 5% of the work and then sitting around waiting for someone
> else to do the other 95% so you can sue them.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message St Valentine 2006-01-13 10:52:57 C++ -> C : Module for converting the WHERE clause to the canonical form with PostgreSQL
Previous Message kevin brintnall 2006-01-13 09:37:32 GRANT/REVOKE column-level privileges