row level grants

[Alexander Cohen]

Is there any way to grant user access at the row level? Or maybe some
way to simulate it?

Alex
---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster

[Joshua D. Drake]

Alexander Cohen wrote:

Is there any way to grant user access at the row level? Or maybe some
way to simulate it?
If you can write a query to will return only the rows you want the user
to see, you can write a view that returns those rows and grant rights to
that view.

J

Alex
---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster

--
Command Prompt, Inc., home of Mammoth PostgreSQL - S/ODBC and S/JDBC
Postgresql support, programming shared hosting and dedicated hosting.
[phone] - [e-mail] - http://www.commandprompt.com
Mammoth PostgreSQL Replicator. Integrated Replication for PostgreSQL
---------------------------(end of broadcast)---------------------------
TIP 8: explain analyze is your friend

[Joe Conway]

Alexander Cohen wrote:

Is there any way to grant user access at the row level? Or maybe some
way to simulate it?

There is no built-in way to do this, at least not currently.

I wrote an article that might get you going in the right direction,
available here:

http://www.onlamp.com/pub/a/onlamp/2...xtensions.html

The functions I refer to in the article are custom C functions -- I'll
be posting the source code on my website (www.joeconway.com) sometime
after OSCON is over in a few weeks. In the meantime maybe you can use
the concepts as a starting point.

HTH,

Joe

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to ma*******@postgresql.org

[Bruno Wolff III]

On Thu, Jul 01, 2004 at 17:09:23 -0400,
Alexander Cohen <al**@toomuchspace.com> wrote:

Is there any way to grant user access at the row level? Or maybe some
way to simulate it?

You can do this with views. You need something in each row that will
allow you to tell which users have access to a row and check that
against current_user in the view. If there is more than one user
per row, then you might need to join the table to another table
that maps users to groups.

---------------------------(end of broadcast)---------------------------
TIP 9: the planner will ignore your desire to choose an index scan if your
joining column's datatypes do not match

[Karsten Hilbert]

> Is there any way to grant user access at the row level? Or maybe some

way to simulate it?

Think about using views. Examples are in the list archive.

Karsten
--
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD 4537 78B9 A9F9 E407 1346

---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster

[Tom Lane]

Bruno Wolff III <br***@wolff.to> writes:

Alexander Cohen <al**@toomuchspace.com> wrote:

Is there any way to grant user access at the row level? Or maybe some
way to simulate it?

You can do this with views. You need something in each row that will
allow you to tell which users have access to a row and check that
against current_user in the view.

There are working examples of this in the standard distribution.
Take a look at the pg_stats view and the information_schema views.

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to ma*******@postgresql.org)