Re: BUG #5147: DBA can not access view

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: BUG #5147: DBA can not access view
Дата
Msg-id 7536.1256911178@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: BUG #5147: DBA can not access view  ("hx.li" <fly2nn@126.com>)
Список pgsql-bugs
"hx.li" <fly2nn@126.com> writes:
>> This is not a bug.  The view is owned by user1 and what the view can
>> access is determined by user1's permissions, independently of who is
>> calling it.

> So I think it should not have a permission error when run "select * from
> view1".

No, that would be a bad idea.  Your proposal essentially means that it's
impossible for a superuser to give up rights when calling a setuid
function or view.  That would be a serious security hazard.

            regards, tom lane

В списке pgsql-bugs по дате отправления:

Предыдущее
От: "hx.li"
Дата:
Сообщение: Re: BUG #5147: DBA can not access view
Следующее
От: Tom Lane
Дата:
Сообщение: Re: BUG #5145: Complex query with lots of LEFT JOIN causes segfault