From: | Alex Pilosov <alex(at)pilosoft(dot)com> |
---|---|
To: | Martín Marqués <martin(at)bugs(dot)unl(dot)edu(dot)ar> |
Cc: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: [HACKERS] something smells bad |
Date: | 2001-06-07 16:46:15 |
Message-ID: | Pine.BSO.4.10.10106071244390.17529-100000@spider.pilosoft.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general pgsql-hackers |
On Thu, 7 Jun 2001, [iso-8859-1] Martn Marqus wrote:
> On Jue 07 Jun 2001 02:27, Alex Pilosov wrote:
> > On Wed, 6 Jun 2001, [iso-8859-1] Martn Marqus wrote:
> > > OK, now I'm more then astonished!
> > > Why was I able to insert as martin then?
> > > Isn't it true (as the docs say) that when I execute a query over a view
> > > with rules, the rules (querys in the DO of the RULE) are executed with
> > > permssions of the owner of the rule (or the view? Any way, martin is
> > > owner of both) and not of the user that executed the query?
> >
> > No. With both views and rules, the actions are executed as the user who
> > executed the query. I don't know if there are plans to allow the 'execute
> > as owner' for rules, right now this option only exists for the triggers.
>
> Well, after todays tests, I have to say that rules are executed with owner
> privileges, and not users.
> This is the output:
*mutter* I was mistaken, indeed, views are executed with permissions of
owner of the view.
-alex
From | Date | Subject | |
---|---|---|---|
Next Message | Steve Wolfe | 2001-06-07 17:09:05 | Re: PostgreSQL Replication Server? IS: Zend comparison chart |
Previous Message | zilch | 2001-06-07 16:38:44 | WAS: PostgreSQL Replication Server? IS: Zend comparison chart |
From | Date | Subject | |
---|---|---|---|
Next Message | Roberto Fichera | 2001-06-07 18:21:36 | Re: Re: Acucobol interface |
Previous Message | Stephan Szabo | 2001-06-07 16:35:06 | Re: AW: Re: [SQL] behavior of ' = NULL' vs. MySQL vs. Stand ards |