Re: [SQL] Handling mutliple clients access with views

2011-10-25 Thread Brice André
Thanks very much for those info. >From what I read, I think Veil will do the trick. I already use ROLES, but there are a few probems with them : - first, as I mix the data from different users in the same table, ROLES do not solve the complete problem. - second, this forces me to use a dedi

Re: [SQL] Handling mutliple clients access with views

2011-10-24 Thread bricklen
On Mon, Oct 24, 2011 at 8:50 PM, Craig Ringer wrote: > > Declarative row-level security (row ownership) would be really nice... > here's hoping the SELinux work can be extended to support a simpler, > OS-agnostic non-SELinux-based row-level RBAC mechanism. > -- > Craig Ringer Veil might do what y

Re: [SQL] Handling mutliple clients access with views

2011-10-24 Thread Craig Ringer
On 25/10/11 11:36, David Johnston wrote: > Except database roles cannot strictly enforce row-level security (i.e., > multiple-tenant) which is the goal of this setup. Ah, yes, if theyr'e relying on _row_ level security then that's very much the case. I misread their post as suggesting that they

Re: [SQL] Handling mutliple clients access with views

2011-10-24 Thread David Johnston
On Oct 24, 2011, at 22:54, Craig Ringer wrote: > On 25/10/11 03:23, Brice André wrote: >> Hello everyone, >> >> I am developping a web service where some tables are handling the data >> of different clients. Depending on configured rights, one client can >> have no access, or read access, or rea

Re: [SQL] Handling mutliple clients access with views

2011-10-24 Thread Craig Ringer
On 25/10/11 03:23, Brice André wrote: > Hello everyone, > > I am developping a web service where some tables are handling the data > of different clients. Depending on configured rights, one client can > have no access, or read access, or read and write access to other > clients data. > > In orde

[SQL] Handling mutliple clients access with views

2011-10-24 Thread Brice André
Hello everyone, I am developping a web service where some tables are handling the data of different clients. Depending on configured rights, one client can have no access, or read access, or read and write access to other clients data. In order to handle that, I am using views and, to ensure that