Re: Q on SELECT column list pushdown from view to table

From: Karsten Hilbert <Karsten(dot)Hilbert(at)gmx(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: Q on SELECT column list pushdown from view to table
Date: 2025-03-26 18:30:13
Message-ID: Z-RHtTCAP_XAA1EX@hermes.hilbert.loc
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Am Wed, Mar 26, 2025 at 06:24:14PM +0100 schrieb Karsten Hilbert:

> > Works fine if you don't mess with the view's security_invoker
> > status.
>
> I know but doing so was kind of the point.
>
> The views are created by a "database owner" role having
> access to all tables. Therefore, roles using the views would
> normally gain access to tables they are otherwise not
> allowed to read.

Or rather, to certain *columns* of tables...

Karsten
--
GPG 40BE 5B0E C98E 1713 AFA6 5BC0 3BEA AC80 7D4F C89B

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Dirschel, Steve 2025-03-26 20:27:29 Trying to dynamically create a procedure
Previous Message Karsten Hilbert 2025-03-26 17:24:14 Re: Q on SELECT column list pushdown from view to table