Re: [GENERAL] Read only access, via functions only

2008-11-05 Thread Craig Ringer
Webb Sprague wrote: >> you can set transactions read only but the user can turn them off. Use >> views, functions and GRANT. > > Views was the key word. I had tried to do it with functions and GRANT alone. You can also do a lot with SECURITY DEFINER functions - for example, if you want to grant

Re: [GENERAL] Read only access, via functions only

2008-11-05 Thread Webb Sprague
> you can set transactions read only but the user can turn them off. Use > views, functions and GRANT. Views was the key word. I had tried to do it with functions and GRANT alone. Thanks to the collective brain that is a listserv. -W -- Sent via pgsql-general mailing list (pgsql-general@postgr

Re: [GENERAL] Read only access, via functions only

2008-11-05 Thread Joshua D. Drake
On Wed, 2008-11-05 at 15:46 -0800, Webb Sprague wrote: > Hi all > > Is there a away to set up a schema such that a certain role has (1) > read only access to (2) all the tables, but (3) must use predefined > functions to use that access? you can set transactions read only but the user can turn th

Re: [GENERAL] Read only access, via functions only

2008-11-05 Thread ries van Twisk
On Nov 5, 2008, at 6:46 PM, Webb Sprague wrote: Hi all Is there a away to set up a schema such that a certain role has (1) read only access to (2) all the tables, but (3) must use predefined functions to use that access? Items 1 and 2 are so that the end user doesn't stomp on the data. I wan

[GENERAL] Read only access, via functions only

2008-11-05 Thread Webb Sprague
Hi all Is there a away to set up a schema such that a certain role has (1) read only access to (2) all the tables, but (3) must use predefined functions to use that access? Items 1 and 2 are so that the end user doesn't stomp on the data. I want item 3 in order to force the application programme