Обсуждение: Prevent users to drop triggers applied on table

Hi,

We have been using a stored procedure which allow users to create table. The stored procedure creates actual table, logging tables, views, and applies triggers. I want to prevent table owner from deleting the triggers applied on table by create table stored procedure. Could anyone please suggest me to get way out here.

Thanks,
Dipti

dipti shah wrote:
> Hi,
>
> We have been using a stored procedure which allow users to create
> table. The stored procedure creates actual table, logging tables,
> views, and applies triggers. I want to prevent table owner from
> deleting the triggers applied on table by create table stored
> procedure. Could anyone please suggest me to get way out here.

if you don't want someone to modify tables, including dropping triggers,
then they shouldn't be the owner of it.  the owner has full rights to a
table, including the right to delete it, alter it, etc.

Yah...that's correct but I am wondering if someone out there knows work around to this.

I could make my table owner to postgres user but then is there any way original user can drop the table. I want original users should allow to drop their table.

Thanks,
Dipti

On 1 Apr 2010, at 9:52, dipti shah wrote:

> Yah...that's correct but I am wondering if someone out there knows work around to this.
>
> I could make my table owner to postgres user but then is there any way original user can drop the table. I want
originalusers should allow to drop their table. 

If you want to give the user DROP TABLE rights, he will also need to be able to drop the triggers and such on that
table.

If you want to work around that you'll need to take the same approach with which you created those tables.

Having the tables owned by a more powerful user will help with that, but in your situation I think the postgres
superusermay be a bit too powerful. You're probably better off creating a non-superuser role for this purpose. 

Alban Hertroys

--
Screwing up is an excellent way to attach something to the ceiling.


!DSPAM:737,4bb4688c10419781048118!