Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle

Поиск
Список
Период
Сортировка
От Peter Eisentraut
Тема Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle
Дата
Msg-id 200901272224.19139.peter_e@gmx.net
обсуждение исходный текст
Ответ на Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On Tuesday 27 January 2009 17:19:28 Tom Lane wrote:
> If we'd had the SQL-spec behavior from day one, it wouldn't be a
> problem, but you can't just blow off the old behavior like that.
> It's a potential security hole, since GRANT ALL on a view used to
> be de facto the same as GRANT SELECT, if you hadn't bothered to
> create any rules.

That is a good point.  But the only clean solution would be to make views 
never updatable by default, and invent a nonstandard syntax to make them so, 
which seems very unattractive to me.  A GUC variable as a transition measure 
could work, though.


В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Joshua D. Drake"
Дата:
Сообщение: Re: pg_upgrade project status
Следующее
От: Peter Eisentraut
Дата:
Сообщение: Re: Commitfest infrastructure (was Re: 8.4 release planning)