Re: [HACHERS] privilege check: column level only?

Peter Eisentraut wrote:
> Am Dienstag, 5. Juni 2007 06:39 schrieb Golden Liu:
>   
>> According to this, column privilege descriptors are created automatically
>> while table privilege descriptor is created. Then, while checking
>> privilege, can I JUST check column level privilege?
>>     
>
> While possible, for performance reasons it would probably be unwise.  Needs 
> checking.
>   

We can possibly infer their existence according to the table level 
privileges in certain cases.  But it's not clear to me how that will 
work when we change the table level privileges, nor how it works with 
revoked privileges. Do we have any provision for negative privileges? If 
not, do we need them?


cheers

andrew