Re: Open 7.3 items

From: Vince Vielhaber <vev(at)michvhf(dot)com>
To: Lamar Owen <lamar(dot)owen(at)wgcr(dot)org>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Open 7.3 items
Date: 2002-08-14 19:55:15
Message-ID: Pine.BSF.4.40.0208141554150.42274-100000@paprika.michvhf.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, 14 Aug 2002, Lamar Owen wrote:

> On Wednesday 14 August 2002 03:29 pm, Vince Vielhaber wrote:
> > Hate to complicate things more, but back to a global username, say
> > you have user "lowen" that should have access to all databases. What
> > happens if there's already a lowen(at)somedb that's an unprivileged user.
> > Assuming lowen is a db superuser, what happens in somedb? If there's
> > a global user "lowen" and you try to create a lowen(at)somedb later, will
> > it be allowed?
>
> If the user 'lowen' is then expanded to 'lowen(at)template1' it would be stored
> that way -- and lowen(at)template1 is different from lowen(at)pari, for instance.
> The lowen(at)template1 user could be a superuser and lowen(at)pari might not -- but
> they become distinct users. Although I do understand the difficulty if the
> FQDU isn't stored in full in the appropriate places. So I guess the solution
> is that wherever a user name is to be stored, the fully qualified form must
> be used and checked against, with @template1 being a 'this user is
> everywhere' shorthand.
>
> But maybe I'm just misunderstanding the implementation.

I may be too, but what's wrong with just "lowen" being shorthand for
'this user is everywhere'? Does it also mean that we'd have a user
postgres(at)template1?

Vince.
--
==========================================================================
Vince Vielhaber -- KA8CSH email: vev(at)michvhf(dot)com http://www.pop4.net
56K Nationwide Dialup from $16.00/mo at Pop4 Networking
http://www.camping-usa.com http://www.cloudninegifts.com
http://www.meanstreamradio.com http://www.unknown-artists.com
==========================================================================

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Neil Conway 2002-08-14 20:32:26 encrypted passwords
Previous Message Bruce Momjian 2002-08-14 19:50:00 Re: journaling in contrib ...