Re: [PATCH] Largeobject access controls

2009/9/24 KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>:
>
> Example)
>  postgres=# SET SESSION AUTHORIZATION ymj;
>  SET
>  postgres=> SELECT loread(lo_open(16453, x'40000'::int), 20);
>  ERROR:  permission denied for largeobject 16453
>
>  postgres=# SET largeobject_compat_acl = on;           <---- enables compatible mode
>  SET                                                         (Only superuser can set it)
>  postgres=# SET SESSION AUTHORIZATION ymj;
>  SET
>  postgres=> SELECT loread(lo_open(16453, x'40000'::int), 20);
>  NOTICE:  permission denied for largeobject 16453      <---- dose not prevent it

i'm not really sure the warnings are worth the trouble but if you want
to do it then the NOTICE version should use another message... i'm not
comfortable with a "permission denied" that is simply ignored...

--
Atentamente,
Jaime Casanova
Soporte y capacitación de PostgreSQL
Asesoría y desarrollo de sistemas
Guayaquil - Ecuador
Cel. +59387171157