Re: [RFC] PostgreSQL Access Control Extension (PGACE)

Tom Lane wrote:
> "Andrew Dunstan" <andrew@dunslane.net> writes:
>   
>> What's more, we have a SoC project for column level access controls.
>>     
>
> ... which presumably wouldn't involve any added dependency on outside code.
>   

Quite so. You can see the project description at 
http://code.google.com/soc/postgres/appinfo.html?csaid=E272DA8E6521568F

> For people who are already using SELinux or Trusted Solaris, making the
> database dependent on that infrastructure might be seen as a plus, but
> I'm not sure the rest of the world would be pleased.  

Even where SELinux is available it has had mixed reviews - I habitually 
disable it.


cheers

andrew