Re: Foreign table permissions and cloning
Tom Lane <tgl@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Shigeru Hanada <hanada@metrosystems.co.jp>
Cc: Robert Haas <robertmhaas@gmail.com>, Thom Brown <thom@linux.com>, PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2011-04-20T13:59:11Z
Lists: pgsql-hackers
Shigeru Hanada <hanada@metrosystems.co.jp> writes: > Attached patch implements along specifications below. It also includes > documents and regression tests. Some of regression tests might be > redundant and removable. > 1) "GRANT privilege [(column_list)] ON [TABLE] TO role" also work for > foreign tables as well as regular tables, if specified privilege was > SELECT. This might seem little inconsistent but I feel natural to use > this syntax for SELECT-able objects. Anyway, such usage can be disabled > with trivial fix. It seems really seriously inconsistent to do that at the same time that you make other forms of GRANT treat foreign tables as a separate class of object. I think if they're going to be a separate class of object, they should be separate, full stop. Making them just mostly separate will confuse people no end. regards, tom lane