Re: Proposal: GRANT cascade to implicit sequences
От | Bruno Wolff III |
---|---|
Тема | Re: Proposal: GRANT cascade to implicit sequences |
Дата | |
Msg-id | 20041013162514.GA10883@wolff.to обсуждение исходный текст |
Ответ на | Proposal: GRANT cascade to implicit sequences (Michael Fuhr <mike@fuhr.org>) |
Ответы |
Re: Proposal: GRANT cascade to implicit sequences
|
Список | pgsql-general |
On Wed, Oct 13, 2004 at 00:37:35 -0600, Michael Fuhr <mike@fuhr.org> wrote: > Comments? Can anybody think of why cascading GRANT and REVOKE to > implicit sequences might be A Bad Idea? Since you can do odd things using explicit sequences, limiting implicit sequences to make things convenient in the common case seems like a reasonable goal. If you go that route it may be a good idea to not allow direct grants and revokes on implicit sequences and just have their access rights derived from the tables. I also think there is some merit in splitting the access rights for nextval and setval, so that insert access grants access to nextval and update access grants access to setval (or perhaps both nextval and setval). That way people who can just insert in the table can't set the sequence number backwards.
В списке pgsql-general по дате отправления: