Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle
Дата
Msg-id 22977.1233088561@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle  (Peter Eisentraut <peter_e@gmx.net>)
Ответы Re: [COMMITTERS] pgsql: Automatic view update rules Bernd Helmle  (Jaime Casanova <jcasanov@systemguards.com.ec>)
Список pgsql-hackers
Peter Eisentraut <peter_e@gmx.net> writes:
> On Tuesday 27 January 2009 17:19:28 Tom Lane wrote:
>> It's a potential security hole, since GRANT ALL on a view used to
>> be de facto the same as GRANT SELECT, if you hadn't bothered to
>> create any rules.

> That is a good point.  But the only clean solution would be to make views 
> never updatable by default, and invent a nonstandard syntax to make them so, 
> which seems very unattractive to me.  A GUC variable as a transition measure 
> could work, though.

Yeah, I tend to prefer the GUC approach over nonstandard syntax too.
We'd need a GUC anyway to determine the default behavior if no
nonstandard clause appeared; so we might as well just do that and not
bother with the syntax options.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Joshua Brindle
Дата:
Сообщение: Re: 8.4 release planning
Следующее
От: Peter Eisentraut
Дата:
Сообщение: Re: 8.4 release planning