Re: [RFC] PostgreSQL Access Control Extension (PGACE)

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Josh Berkus <josh(at)agliodbs(dot)com>, KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>, pgsql-hackers(at)postgresql(dot)org, glenn(dot)faden(at)sun(dot)com, james(dot)hughes(at)sun(dot)com
Subject: Re: [RFC] PostgreSQL Access Control Extension (PGACE)
Date: 2007-04-17 01:16:28
Message-ID: 46241FEC.5020102@dunslane.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tom Lane wrote:
> "Andrew Dunstan" <andrew(at)dunslane(dot)net> writes:
>
>> What's more, we have a SoC project for column level access controls.
>>
>
> ... which presumably wouldn't involve any added dependency on outside code.
>

Quite so. You can see the project description at
http://code.google.com/soc/postgres/appinfo.html?csaid=E272DA8E6521568F

> For people who are already using SELinux or Trusted Solaris, making the
> database dependent on that infrastructure might be seen as a plus, but
> I'm not sure the rest of the world would be pleased.

Even where SELinux is available it has had mixed reviews - I habitually
disable it.

cheers

andrew

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Alvaro Herrera 2007-04-17 01:32:02 Re: Hacking on PostgreSQL via GIT
Previous Message Andrew Dunstan 2007-04-17 01:13:15 Re: Hacking on PostgreSQL via GIT