Re: [HACKERS] something smells bad

From: Alex Pilosov <alex(at)pilosoft(dot)com>
To: Martín Marqués <martin(at)bugs(dot)unl(dot)edu(dot)ar>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: [HACKERS] something smells bad
Date: 2001-06-07 16:46:15
Message-ID: Pine.BSO.4.10.10106071244390.17529-100000@spider.pilosoft.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-hackers

On Thu, 7 Jun 2001, [iso-8859-1] Martn Marqus wrote:

> On Jue 07 Jun 2001 02:27, Alex Pilosov wrote:
> > On Wed, 6 Jun 2001, [iso-8859-1] Martn Marqus wrote:
> > > OK, now I'm more then astonished!
> > > Why was I able to insert as martin then?
> > > Isn't it true (as the docs say) that when I execute a query over a view
> > > with rules, the rules (querys in the DO of the RULE) are executed with
> > > permssions of the owner of the rule (or the view? Any way, martin is
> > > owner of both) and not of the user that executed the query?
> >
> > No. With both views and rules, the actions are executed as the user who
> > executed the query. I don't know if there are plans to allow the 'execute
> > as owner' for rules, right now this option only exists for the triggers.
>
> Well, after todays tests, I have to say that rules are executed with owner
> privileges, and not users.
> This is the output:
*mutter* I was mistaken, indeed, views are executed with permissions of
owner of the view.

-alex

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Steve Wolfe 2001-06-07 17:09:05 Re: PostgreSQL Replication Server? IS: Zend comparison chart
Previous Message zilch 2001-06-07 16:38:44 WAS: PostgreSQL Replication Server? IS: Zend comparison chart

Browse pgsql-hackers by date

  From Date Subject
Next Message Roberto Fichera 2001-06-07 18:21:36 Re: Re: Acucobol interface
Previous Message Stephan Szabo 2001-06-07 16:35:06 Re: AW: Re: [SQL] behavior of ' = NULL' vs. MySQL vs. Stand ards