Re: Foreign table permissions and cloning

Tom Lane <tgl@sss.pgh.pa.us>

From: Tom Lane <tgl@sss.pgh.pa.us>
To: Shigeru Hanada <hanada@metrosystems.co.jp>
Cc: Robert Haas <robertmhaas@gmail.com>, Thom Brown <thom@linux.com>, PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2011-04-20T13:59:11Z
Lists: pgsql-hackers
Shigeru Hanada <hanada@metrosystems.co.jp> writes:
> Attached patch implements along specifications below.  It also includes 
> documents and regression tests.  Some of regression tests might be 
> redundant and removable.

> 1) "GRANT privilege [(column_list)] ON [TABLE] TO role" also work for 
> foreign tables as well as regular tables, if specified privilege was 
> SELECT.  This might seem little inconsistent but I feel natural to use 
> this syntax for SELECT-able objects.  Anyway, such usage can be disabled 
> with trivial fix.

It seems really seriously inconsistent to do that at the same time that
you make other forms of GRANT treat foreign tables as a separate class
of object.  I think if they're going to be a separate class of object,
they should be separate, full stop.  Making them just mostly separate
will confuse people no end.

			regards, tom lane