Re: General Security-Question

elwood(at)agouros(dot)de (Konstantinos Agouros) writes:
> Since I must grant update/insert/delete access to this table to everybody
> that can use this application, how can I stop people from updating the data
> of the others.

Triggers that compare current_user to the userid column of the table,
perhaps?

You might well be better off with the other solution (one database
userid, enforce restrictions in application), however. If most of the
people involved here have no reason to be accessing the database for
other purposes, I'd be inclined not to set up a database userid for each
of them.

regards, tom lane