Re: GRANT ON ALL IN schema

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: GRANT ON ALL IN schema
Дата
Msg-id 603c8f070909270954n585e8e8am9eb1c187dec9fe19@mail.gmail.com
обсуждение исходный текст
Ответ на Re: GRANT ON ALL IN schema  (Petr Jelinek <pjmodos@pjmodos.net>)
Ответы Re: GRANT ON ALL IN schema  (Petr Jelinek <pjmodos@pjmodos.net>)
Re: GRANT ON ALL IN schema  (Abhijit Menon-Sen <ams@toroid.org>)
Re: GRANT ON ALL IN schema  (Jaime Casanova <jcasanov@systemguards.com.ec>)
Список pgsql-hackers
2009/9/21 Petr Jelinek <pjmodos@pjmodos.net>:
> Abhijit Menon-Sen wrote:
>
> I have not yet been able to do a complete review of this patch, but I am
> posting this because I'll be travelling for a week starting tomorrow. My
> comments are based mostly on reading the patch, and not on any intensive
> testing of the feature. I have left the patch status unchanged at "needs
> review", although I think it's close to "ready for committer".
>
>
> Thanks for your review.
>
> 1. The patch did apply to HEAD and build cleanly, but there are now a
>    couple of minor (documentation) conflicts. (Sorry, I would have fixed
>    them and reposted a patch, but I'm running out of time right now.)
>
>
> I fixed those conflicts in attached patch.
>
>
>
> *** a/doc/src/sgml/ref/grant.sgml
> --- b/doc/src/sgml/ref/grant.sgml
> [...]
>
>     <para>
> +    There is also the possibility of granting permissions to all objects of
> +    given type inside one or multiple schemas. This functionality is
> supported
> +    for tables, views, sequences and functions and can done by using
> +    ALL {TABLES|SEQUENCES|FUNCTIONS} IN SCHEMA schemaname syntax in place
> +    of object name.
> +   </para>
> +
> +   <para>
>
>
> 2. Here I suggest the following wording:
>
>     <para>
>     You can also grant permissions on all tables, sequences, or
>     functions that currently exist within a given schema by specifying
>     "ALL {TABLES|SEQUENCES|FUNCTIONS} IN SCHEMA schemaname" in place of
>     an object name.
>     </para>
>
> 3. I believe MySQL's "grant all privileges on foo.* to someone" grants
>    privileges on all existing objects in foo _but also_ on any objects
>    that may be created later. This patch only gives you a way to grant
>    privileges only on the objects currently within a schema. I strongly
>    prefer this behaviour myself, but I do think the documentation needs
>    a brief mention of this fact, to avoid surprising people. That's why
>    I added "that currently exist" to (2), above. Maybe another sentence
>    that specifically says that objects created later are unaffected is
>    in order. I'm not sure.
>
>
> I'll leave the exact wording to commiter, but in the attached patch I
> changed it to say "all existing objects" instead of "all objects".
>
> Except for above two changes and the fact that it's against current head,
> the patch is exactly the same.

Abhijit,

If this patch looks good now, can you mark it Ready for Committer in
the CommitFest app?  If there are any remaining issues, please post a
further review.

Thanks,

...Robert


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Using results from INSERT ... RETURNING
Следующее
От: Robert Haas
Дата:
Сообщение: Re: [PATCH] Reworks for Access Control facilities (r2311)