Re: Controlling access to Sequences

Matthew Horoschun <mhoroschun@canprint.com.au> writes:
> My understanding is that I need to GRANT the UPDATE privilege on the 
> SEQUENCE if I want a user to be able to to use nextval() on it. The 
> trouble is, if they can do a nextval() they can also do a setval() 

So?  With enough time on your hands, you can apply nextval() often
enough to get from any point A to any point B.  It seems illusory
to think that forbidding setval() makes things more secure.
        regards, tom lane