Re: Anticipatory privileges

From: "John D(dot) Burger" <john(at)mitre(dot)org>
To: "pgsql-general postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: Re: Anticipatory privileges
Date: 2007-02-17 17:12:44
Message-ID: 40BBDBBC-D79C-436A-9071-2C8B5F2B9246@mitre.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Tom Lane wrote:

>> How dangerous is it to UPDATE pg_class
>> directly, perhaps copying the relacl column for a table that I've
>> done by hand with GRANT.
>
> You can do it, and it will seem to work. However, unless you also
> make
> entries in pg_shdepend, bad things will happen if you later drop
> any of
> the users mentioned in the ACL. Your code will also be vulnerable to
> breakage in future releases if we change any of these details.
>
> A better approach is to write a plpgsql function that assembles and
> EXECUTEs the required GRANT commands.

Okay, thanks - guess it's time to learn some real plpgsql control
structures.

- John Burger
MITRE

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message David Legault 2007-02-17 17:24:31 Addons
Previous Message Scott Ribe 2007-02-17 17:11:26 Re: Small request re error message