Discussion:
Urgent!!!! Setting permissions on Views
(too old to reply)
Dani Mezher
2004-02-12 18:52:59 UTC
Permalink
Hello,

I have a small problem setting the permissions for my data.
Actually my application allows specific users to manipulate selected
tuples stored in the same tables. Therefore, I revoked all privileged on
the tables and encapsulated them through views based on the "user"
variable. This way specific users control specific data.

The problem arises when I try to lock my data once it was
validated. Although I set the permissions on the views to select and
revoked the insert, update and delete privileges; my users are capable
of modifying the table through the views. I even tried to revoke the
select permission but this does not solve the problem.

Can anyone help me fix this problem???

Regards
Tom Lane
2004-02-15 05:46:06 UTC
Permalink
Post by Dani Mezher
I have a small problem setting the permissions for my data.
What PG version is this? There's a known bug in some recent versions
about checking view permissions ...

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 8: explain analyze is your friend
Greg Patnude
2004-02-16 17:56:49 UTC
Permalink
CREATE RULE no_inserts_on_my_view AS ON INSERT TO myView DO INSTEAD NOTHING;
--
Greg Patnude / The Digital Demention
2916 East Upper Hayden Lake Road
Hayden Lake, ID 83835
(208) 762-0762

""Dani Mezher"" <***@fi.usj.edu.lb> wrote in message news:002e01c3f199$6fb52a60$***@FI.USJ.EDU.LB...
Hello,



I have a small problem setting the permissions for my data. Actually my application allows specific users to manipulate selected tuples stored in the same tables. Therefore, I revoked all privileged on the tables and encapsulated them through views based on the "user" variable. This way specific users control specific data.



The problem arises when I try to lock my data once it was validated. Although I set the permissions on the views to select and revoked the insert, update and delete privileges; my users are capable of modifying the table through the views. I even tried to revoke the select permission but this does not solve the problem.



Can anyone help me fix this problem???



Regards
Loading...