Re: public schema default ACL

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: public schema default ACL
Дата
Msg-id 19853.1520433890@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: public schema default ACL  (Alvaro Herrera <alvherre@alvh.no-ip.org>)
Ответы Re: public schema default ACL
Список pgsql-hackers
Alvaro Herrera <alvherre@alvh.no-ip.org> writes:
> Now, maybe the idea of creating it as soon as a connection is
> established is not great.  What about creating it only when the first
> object creation is attempted and there is no other schema to create in?
> This avoid pointless proliferation of empty user schemas, as well as
> avoid the overhead of checking existence of schem $user on each
> connection.

Hmm.  On first glance that sounds bizarre, but we do something pretty
similar for the pg_temp schemas, so it could likely be made to work.

One issue to think about is exactly which $user we intend to make the
schema for, if we've executed SET SESSION AUTHORIZATION, or are inside
a SECURITY DEFINER function, etc etc.  I'd argue that only the original
connection username should get this treatment, which may mean that object
creation can fail in those contexts.

            regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: David Steele
Дата:
Сообщение: Re: [HACKERS] Subscription code improvements
Следующее
От: David Steele
Дата:
Сообщение: Re: Re: [PATCH] GET DIAGNOSTICS FUNCTION_NAME