Re: Proposal: access control jails (and introduction as aspiring GSoC student)

Tom Lane escribió:
> Alvaro Herrera <alvherre@commandprompt.com> writes:
> > Robert Haas escribi�:

> >> But roles aren't database-specific...  they're globals.
> 
> > Well, that's another longstanding request ;-)  (See the
> > db_user_namespace hack)
> 
> Yeah, you'd have to fix that first.  The "ambitious" part of that is
> coming up with a spec that everybody will accept.  Once you had that,
> coding it might not be very hard ...

I wonder if this is simpler now that we got rid of the flat files stuff.
We could validate the user once we've connected to a database and thus
able to poke at the local user catalog, not just the global one.  I
think that was a serious roadblock.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.