Re: [PATCH] DefaultACLs

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: [PATCH] DefaultACLs
Дата
Msg-id 20090717130518.GP20436@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: [PATCH] DefaultACLs  (Nikhil Sontakke <nikhil.sontakke@enterprisedb.com>)
Ответы Re: [PATCH] DefaultACLs  (Petr Jelinek <pjmodos@pjmodos.net>)
Список pgsql-hackers
Hey,

* Nikhil Sontakke (nikhil.sontakke@enterprisedb.com) wrote:
> > We can certainly do it either way, but I don't see much downside to
> > having a new enum and a number of downsides with modifying the existing
> > grant enums.
>
> Sure, I understand. But if we want to go the DefaultACLs way, then we
> need to change the "GRANT ON ALL" patch a bit too for the sake of
> uniformity - don't we? There is indeed benefit in managing ACLs for
> existing objects, so that patch has some value too.

I agree that they should be consistant.  The GRANT ON ALL shares alot
more of the syntax with GRANT than DefaultACL though, which makes it a
more interesting question there.  I can understand not wanting to
duplicate the GRANT syntax.  I think my suggestion would be to add a
field to the structure passed around by GRANT which indicates if 'VIEW'
was requested or not in the command.  This could be used both for GRANT
ON ALL and to allow 'GRANT ON VIEW blah' to verify that the relation
being granted on is a view.
Thanks,
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Nikhil Sontakke
Дата:
Сообщение: Re: [PATCH] DefaultACLs
Следующее
От: Petr Jelinek
Дата:
Сообщение: Re: GRANT ON ALL IN schema