Re: New patch for Column-level privileges

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: New patch for Column-level privileges
Дата
Msg-id 20090113140122.GA4656@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: New patch for Column-level privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: New patch for Column-level privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: New patch for Column-level privileges  (KaiGai Kohei <kaigai@ak.jp.nec.com>)
Список pgsql-hackers
Tom, er al,

* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> I'm thinking make_var is not the place to do this.  The places that are
> supposed to be taking care of permissions are the ones that do this:
>
>         /* Require read access --- see comments in setTargetTable() */
>         rte->requiredPerms |= ACL_SELECT;

Argh.  That's what I had started out with, but I couldn't figure out how
to handle the JOIN case.  I'm a bit mystified by what KaiGai found
though and havn't had a chance to look at it yet, but I thought I had
tested the JOIN cases and I had added them to the regression tests.
Guess I missed something.

> It's possible that we've missed some --- in particular, right at the
> moment I am not sure that whole-row Vars are handled properly.

I added specific regression test for whole-row Vars, so I'd be concerned
if something isn't working there.

> And maybe we could refactor a little bit to save some code.
> But those are basically the same places that ought to be adding
> bits to the column bitmaps.

I tend to agree, provided we can handle JOIN clauses sanely at those
places.  I'll try and look at KaiGai's patch today and provide feedback.
Thanks,
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Emanuel Calvo Franco
Дата:
Сообщение: Re: solaris libpq threaded build fails
Следующее
От: Peter Eisentraut
Дата:
Сообщение: Re: per-database locale: createdb switches