I am implementing the authorization API for sqlite 3.
I want to map high level permissions to low level Sqlite permissions.

This is my current map:
SQL_CREATE:
    SQLITE_CREATE_INDEX
    SQLITE_CREATE_TABLE
    SQLITE_CREATE_TEMP_INDEX
    SQLITE_CREATE_TEMP_TABLE
    SQLITE_CREATE_TEMP_TRIGGER
    SQLITE_CREATE_TEMP_VIEW
    SQLITE_CREATE_TRIGGER
    SQLITE_CREATE_VIEW
    SQLITE_ALTER_TABLE
    SQLITE_REINDEX

SQL_DELETE:
    SQLITE_DELETE

SQL_DROP:
    SQLITE_DROP_INDEX
    SQLITE_DROP_TABLE
    SQLITE_DROP_TEMP_INDEX
    SQLITE_DROP_TEMP_TABLE
    SQLITE_DROP_TEMP_TRIGGER
    SQLITE_DROP_TEMP_VIEW
    SQLITE_DROP_TRIGGER
    SQLITE_DROP_VIEW

SQL_INSERT:
    SQLITE_INSERT
    SQLITE_UPDATE
    SQLITE_TRANSACTION

SQL_PRAGMA:
    SQLITE_PRAGMA

SQL_SELECT:
    SQLITE_SELECT
    SQLITE_READ

I am not sure about SQLITE_READ, have I to give this permission also to SQL_INSERT? Anyone can confirm that SQLITE_COPY privilege has been removed in sqlite 3? This page http://www.sqlite.org/lang_copy.html confirms me, but SQLITE_COPY is in sqlite3.h so I am sure about this...

Thanks a lot for your help.
Regards,
Marco Bambini
SQLabs.net

Reply via email to