Re: General Security-Question

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: General Security-Question
Дата
Msg-id 8654.992899163@sss.pgh.pa.us
обсуждение исходный текст
Ответ на General Security-Question  (elwood@agouros.de (Konstantinos Agouros))
Список pgsql-general
elwood@agouros.de (Konstantinos Agouros) writes:
> Since I must grant update/insert/delete access to this table to everybody
> that can use this application, how can I stop people from updating the data
> of the others.

Triggers that compare current_user to the userid column of the table,
perhaps?

You might well be better off with the other solution (one database
userid, enforce restrictions in application), however.  If most of the
people involved here have no reason to be accessing the database for
other purposes, I'd be inclined not to set up a database userid for each
of them.

            regards, tom lane

В списке pgsql-general по дате отправления:

Предыдущее
От: Doug McNaught
Дата:
Сообщение: Re: General Security-Question
Следующее
От: Joel Burton
Дата:
Сообщение: Re: Add primary and unique keys