Re: BUG #1794: inheritance removes permissions from the parent

From: Sean Burlington <sean(at)uncertainty(dot)org(dot)uk>
To: Michael Fuhr <mike(at)fuhr(dot)org>
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #1794: inheritance removes permissions from the parent
Date: 2005-07-28 14:56:14
Message-ID: 42E8F20E.4010902@uncertainty.org.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-patches

Michael Fuhr wrote:
> On Thu, Jul 28, 2005 at 12:48:35PM +0100, Sean Burlington wrote:
>
>>Description: inheritance removes permissions from the parent table
>
>
> I think a more accurate description would be "permissions not
> inherited by children," and that isn't necessarily a bug.
>

I agree it may not be a bug - but it's more than the permissions not
being inherited: the parent is affected.

[snip]

> Records in the child are visible when you select from the parent,
> so it follows that you'd need permission on both tables. If you
> want only records that are in the parent then use FROM ONLY:
>
> SELECT * FROM ONLY a;
>

That makes sense :-)

I was experimenting with inheritance for the first time and for me this
effect was a real suprise.

It would be handy if this was in the documentation for anyone else who
comes across this issue

Would it be possible to allow the usual select and just return the
records the user has permission for - possibly along with a warning
about the child table?

--

Sean

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Richard Huxton 2005-07-28 15:01:20 Re: BUG #1795: mirroring
Previous Message David Dabney 2005-07-28 14:48:31 Re: Insert statement changes timestamp value from MS Access

Browse pgsql-patches by date

  From Date Subject
Next Message Tom Lane 2005-07-28 17:54:34 Re: AIX - pgport/contrib resolution
Previous Message Andrew Dunstan 2005-07-28 13:53:23 Re: AIX - pgport/contrib resolution