Re: [HACKERS] GRANT/REVOKE: Allow column-level privileges

2006-01-29 Thread kevin brintnall
On Sun, Jan 29, 2006 at 08:16:40PM -0500, Tom Lane wrote: > Euler Taveira de Oliveira <[EMAIL PROTECTED]> writes: > > --- kevin brintnall <[EMAIL PROTECTED]> escreveu: > >> if user matches an acl for the column > >>.. and priv is granted, then permit >

Re: [HACKERS] GRANT/REVOKE: Allow column-level privileges

2006-01-29 Thread kevin brintnall
an acl for the column .. and priv is granted, then permit .. else priv is not granted, reject else fall through to table privileges > 2. deal with circles in GRANT graph. Can you give an examle for how this is any different for column-level GRANTs? -- ke

Re: [HACKERS] TODO: GRANT/REVOKE: Allow column-level privileges

2006-01-20 Thread kevin brintnall
On Fri, Jan 20, 2006 at 07:09:46PM -0500, Tom Lane wrote: > kevin brintnall <[EMAIL PROTECTED]> writes: > > * add OID column to pg_attribute. This permits dependencies to be > >registered correctly in pg_shdepend. > > No, no ... the precedent in pg_depend is that

[HACKERS] TODO: GRANT/REVOKE: Allow column-level privileges

2006-01-20 Thread kevin brintnall
e any feedback on the design changes I've made, or any other potential snags I should watch out for. Thanks. -- kevin brintnall =~ <[EMAIL PROTECTED]> ---(end of broadcast)--- TIP 5: don't forget to increase your free space map settings

[HACKERS] restrict column-level GRANTs to a single relation?

2006-01-19 Thread kevin brintnall
grant to be specified as: GRANT SELECT (col1, col2, col3) ON table1 TO grantee; GRANT SELECT (col1, col2, col3) ON table2 TO grantee; The SQL standards don't seem to mandate the first form (unless I misread?).. Do y'all think this is a reasonable compromise? -- kevin brint

Re: [HACKERS] GRANT/REVOKE column-level privileges

2006-01-13 Thread kevin brintnall
o pg_attribute. Adding columns to any of > the core system catalogs is generally a PITA ... not impossible, > but there are plenty of details to take care of. Thank you. That is a good suggestion. -- kevin brintnall =~ <[EMAIL PROTECTED]> ---(end

[HACKERS] GRANT/REVOKE column-level privileges

2006-01-13 Thread kevin brintnall
work with pg_attribute? Ideas? -- kevin brintnall =~ <[EMAIL PROTECTED]> ---(end of broadcast)--- TIP 3: Have you checked our extensive FAQ? http://www.postgresql.org/docs/faq

[HACKERS] TODO: Allow INET + INT4 to increment the host part of the address

2006-01-08 Thread kevin brintnall
bout using 1265, but I don't want to conflict with any existing work. Is there a process for getting an OID (or is this it? :) -- kevin brintnall =~ <[EMAIL PROTECTED]> ---(end of broadcast)--- TIP 4: Have you searc