Re: Proper use of Groups and Users (Roles).

From: Vincent Veyron <vv(dot)lists(at)wanadoo(dot)fr>
To: Melvin Davidson <melvin6925(at)gmail(dot)com>
Cc: "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: Re: Proper use of Groups and Users (Roles).
Date: 2016-02-16 16:59:43
Message-ID: 20160216175943.c2994b6c59ac8ed5ceb51886@wanadoo.fr
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Tue, 16 Feb 2016 09:14:30 -0500
Melvin Davidson <melvin6925(at)gmail(dot)com> wrote:

> The problem is TRUNCATE is more of an administrative privilege. Also, it is
> not captured in a DELETE trigger, so you have a security issue with that.

Ha, well, learn something new every day

> Also, REFERENCES & TRIGGER are schema changes which should never be done by
> a normal user.

Sure. I was thinking of the data changes.

Thanks.

--
Bien à vous, Vincent Veyron

https://marica.fr/
Gestion des contentieux, des dossiers de sinistres assurance et des contrats pour le service juridique

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2016-02-16 17:04:23 Re: Suggest note in index documentation about long running transactions
Previous Message hubert depesz lubaczewski 2016-02-16 16:15:39 Re: [SQL] refer function name by a variable in the function body