Re: Fwd: A million users
От | Achilleas Mantzios - cloud |
---|---|
Тема | Re: Fwd: A million users |
Дата | |
Msg-id | 3a93d9b1-e2a1-4d33-b9fc-702b8d43cdba@cloud.gatewaynet.com обсуждение исходный текст |
Ответ на | Re: Fwd: A million users (Alvaro Herrera <alvherre@alvh.no-ip.org>) |
Ответы |
Re: Fwd: A million users
|
Список | pgsql-general |
On 11/13/24 12:29, Alvaro Herrera wrote: > On 2024-Nov-13, Vijaykumar Jain wrote: > >> I tried to grant select permissions to 5000 different roles on one table, >> It failed with row size too big already at 2443. > But you can grant select to one "reader" role, and grant that one role > to however many other roles you want. This way you can have an > arbitrary number of roles with indirect access to the table. In > real-world usage, this is more convenient that granting access to > individual roles on individual tables; likely, you'll grant access to > sets of tables/views/functions/etc rather than exactly one, and you can > manage that more easily if you have one intermediate role to modify than > if you have to mess with 5000 individual roles. Exactly! In the later versions, security gets more and more refined and strengthened. So ppl should think about moving away from "public" , and start implementing finer grained schemes of security, as you suggest. + \dp shows prettier than having 1000+ users listed. >
В списке pgsql-general по дате отправления: