Re: Do we want SYNONYMS?

From: Dmitriy Igrishin <dmitigr(at)gmail(dot)com>
To: Daniel Verite <daniel(at)manitou-mail(dot)org>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Do we want SYNONYMS?
Date: 2010-12-07 12:54:24
Message-ID: AANLkTi=1wJX=DorCnrPaiuSmRD5ejAmSJt48q_64r404@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hey Daniel,

Again link to oracle.com...

During this thread I believe that synonyms gives nothing
except confusion and mess.

2010/12/7 Daniel Verite <daniel(at)manitou-mail(dot)org>

> Tom Lane wrote:
>
> > Taken at face value from a Postgres perspective, these statements seem
> > to imply that different ownership and permissions apply to a synonym
> > than to its referenced object; which seems like a completely horrid idea
> > from a security standpoint. But maybe they are only trying to say that
> > a synonym hides which *schema* the referenced object is in, and that is
> > tantamount to hiding the owner if you have the mindset that owner ==
> > schema. Can anyone elucidate on just what is behind those statements?
>
> From
>
> http://download.oracle.com/docs/cd/B28359_01/network.111/b28531/authorization
> .htm#i1009141<http://download.oracle.com/docs/cd/B28359_01/network.111/b28531/authorization%0A.htm#i1009141>
>
> [quote]
> A schema object and its synonym are equivalent with respect to privileges.
> That is, the object privileges granted on a table, view, sequence,
> procedure,
> function, or package apply whether referencing the base object by name or
> by
> using a synonym.
> [/quote]
>
> ...
>
> [quote]
> If you grant object privileges on a table, view, sequence, procedure,
> function, or package by referring to the object through a synonym for the
> object, then the effect is the same as if no synonym were used.
> [/quote]
>
> Best regards,
> --
> Daniel
> PostgreSQL-powered mail user agent and storage:
> http://www.manitou-mail.org
>
> --
> Sent via pgsql-general mailing list (pgsql-general(at)postgresql(dot)org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-general
>

--
// Dmitriy.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Vick Khera 2010-12-07 13:31:13 Re: Do we want SYNONYMS?
Previous Message Daniel Verite 2010-12-07 12:18:32 Re: Do we want SYNONYMS?