Re: Privileges

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Privileges
Дата
Msg-id 8388.1271719586@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Privileges  (Simon Riggs <simon@2ndQuadrant.com>)
Список pgsql-hackers
Simon Riggs <simon@2ndQuadrant.com> writes:
> There is a command to set privileges

>   GRANT SELECT ON ALL TABLES IN SCHEMA foo TO PUBLIC;

> and a command to set default privileges

>   ALTER DEFAULT PRIVILEGES IN SCHEMA foo
>   GRANT SELECT ON TABLES TO PUBLIC;

> In the first command the ALL is required, whereas in the second command
> the ALL must be absent.

> ISTM that the ALL should be optional in both cases.

I don't believe this is a good idea.  ALL in the second statement would
give a completely misleading impression, because it does *not* grant
privileges on all tables, in particular it doesn't affect existing
tables.  Conversely, leaving out ALL in the first statement would limit
our flexibility to insert additional options there in future.  (ALL is a
fully reserved word, TABLES isn't, so your proposal greatly increases
the odds of future syntactic conflicts.)
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Thoughts on pg_hba.conf rejection
Следующее
От: Robert Haas
Дата:
Сообщение: Re: Thoughts on pg_hba.conf rejection