Bruce Momjian wrote:
I like your text much better --- added. I will throw this email in the
7.5 queue and we can decide if it is a bug then.
If is a bug is better have a patch for the 7.4
May be is only a missing feature.
For sure for us was and is actually a nightmare imagine :
V1 -> V2 -> F
Tom Lane wrote:
> Bruce Momjian <[EMAIL PROTECTED]> writes:
> > I am documenting this behavior in the CREATE VIEW manual page, diff
> > attached.
>
> > +
> > + While access to tables in the view is controlled entirely by permissions
> > + on the view, functions called by the view are c
Bruce Momjian <[EMAIL PROTECTED]> writes:
> I am documenting this behavior in the CREATE VIEW manual page, diff
> attached.
> +
> + While access to tables in the view is controlled entirely by permissions
> + on the view, functions called by the view are checked independently.
> +
I am documenting this behavior in the CREATE VIEW manual page, diff
attached.
---
Gaetano Mendola wrote:
> "Bruce Momjian" <[EMAIL PROTECTED]> wrote:
> > Tom Lane wrote:
> > > Bruce Momjian <[EMAIL PROTECTED]> writes:
> > >
"Bruce Momjian" <[EMAIL PROTECTED]> wrote:
> Tom Lane wrote:
> > Bruce Momjian <[EMAIL PROTECTED]> writes:
> > > Someone asked me a question about view and function permissions. I
> > > assumed all object access done by a view would be based on the
> > > permissions on the view, and not the permis
"Bruce Momjian" <[EMAIL PROTECTED]> wrote:
> Tom Lane wrote:
> > Bruce Momjian <[EMAIL PROTECTED]> writes:
> > > Someone asked me a question about view and function permissions. I
> > > assumed all object access done by a view would be based on the
> > > permissions on the view, and not the permis
Bruce Momjian <[EMAIL PROTECTED]> writes:
> Well, it sure sounds like a bug. What logic is there that table access
> use the view permissions, but not function access? Could we just use
> SECURITY DEFINER for function calls in views?
You're confusing two distinct questions, I think. One is how
Tom Lane wrote:
> Bruce Momjian <[EMAIL PROTECTED]> writes:
> > Someone asked me a question about view and function permissions. I
> > assumed all object access done by a view would be based on the
> > permissions on the view, and not the permissions of the objects.
>
> Table references are check
Bruce Momjian <[EMAIL PROTECTED]> writes:
> Someone asked me a question about view and function permissions. I
> assumed all object access done by a view would be based on the
> permissions on the view, and not the permissions of the objects.
Table references are checked according to the owner of
Someone asked me a question about view and function permissions. I
assumed all object access done by a view would be based on the
permissions on the view, and not the permissions of the objects.
While table access done in a view follows this outline, function call
access does not. In my tests be
10 matches
Mail list logo
