Re: New patch for Column-level privileges

* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Stephen Frost <sfrost@snowman.net> writes:
> > * Tom Lane (tgl@sss.pgh.pa.us) wrote:
> >> What I see being tested is SELECT *, which is a different animal
> >> entirely.
>
> > Wouldn't this test cover those?
> >   SELECT atest5 FROM atest5; -- fail
>
> Oh, I didn't see that.  Still, this doesn't test whether the behavior
> is correct with respect to ADD/DROP COLUMN --- if that were implemented
> like SELECT * you'd not see any change in the regression result.

Hrm.  If a column is added and you're not granted SELECT rights on it
(even if you have access to all the originals), it should start failing
for you.  I can certainly add a test case to cover that though.  Or is
that not the behavior you're expecting?
Thanks,
    Stephen