Re: TODO: GRANT/REVOKE: Allow column-level privileges

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: TODO: GRANT/REVOKE: Allow column-level privileges
Дата
Msg-id 6645.1137802186@sss.pgh.pa.us
обсуждение исходный текст
Ответ на TODO: GRANT/REVOKE: Allow column-level privileges  (kevin brintnall <kbrint@rufus.net>)
Ответы Re: TODO: GRANT/REVOKE: Allow column-level privileges  (kevin brintnall <kbrint@rufus.net>)
Список pgsql-hackers
kevin brintnall <kbrint@rufus.net> writes:
>  * add OID column to pg_attribute.  This permits dependencies to be
>    registered correctly in pg_shdepend.

No, no ... the precedent in pg_depend is that columns are represented as
the table's OID plus a column number.  Please don't invent some random
other notation for a column, especially not one that is so expensive to
relate to the parent table.  Add a subobject ID to pg_shdepend instead.

> STILL LEFT TO DO:

My recollection is that there's quite some deal of code that assumes
pg_attribute rows are fixed-width.  You will have some issues there.
It's possible though that none of that code needs to access privileges,
in which case you'd be OK just dropping off the ACL data from the
in-memory copies of pg_attribute rows.  Another possible solution is the
pg_attrdef model, ie, keep the ACLs somewhere else.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: kevin brintnall
Дата:
Сообщение: TODO: GRANT/REVOKE: Allow column-level privileges
Следующее
От: Rick Gigger
Дата:
Сообщение: Re: panic on 7.3