Using aclitem[] at application layer

Поиск
Список
Период
Сортировка
Искать
От
A.M.
Тема
Using aclitem[] at application layer
Дата
Msg-id
6A7619AE-6BD2-4E6E-B04C-3F2D49833933@themactionfaction.com
Список
Дерево обсуждения
Using aclitem[] at application layer "A.M." <agentm@themactionfaction.com>
Re: Using aclitem[] at application layer Tom Lane <tgl@sss.pgh.pa.us>
Hello,

In an attempt to implement ACLs at the application layer (for resources stored outside of the database), I am evaluating using aclitem[] as a column type. All the functions I would need seem to be in place: aclcontains, aclexplode, aclinsert, aclitemeq, aclitemin, aclitemout, aclremove, but they are conspicuously missing from the documentation (http://www.mail-archive.com/pgsql-patches@postgresql.org/msg03400.html), so I wonder if there are any caveats or hurdles which would make me consider writing my own type.

From a cursory examination, it looks like the limitations would be:

1) roles must refer to postgresql roles (that's fine for my case)

2) permission options are hardcoded to "arwdDxtXUCTc" (not so great)

Are there any other problems I would encounter?

Cheers,
M

В списке pgsql-general по дате отправления
От: Craig Ringer
Дата:
От: Tom Lane
Дата:
FAQ