Re: db_user_namespace a "temporary measure"

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Magnus Hagander <magnus(at)hagander(dot)net>, Thom Brown <thom(at)linux(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: db_user_namespace a "temporary measure"
Date: 2014-03-11 16:43:11
Message-ID: 531F3D1F.9010306@dunslane.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers


On 03/11/2014 12:37 PM, Stephen Frost wrote:

> Isn't the other issue for ISPs essentially that we don't have row-level
> security for our global catalogs? as in- we can't limit what's in
> pg_authid to only those entries a given user should be able to see? I
> don't think db_user_namespace addresses that issue (but I didn't go look
> either).
>
>

Possibly, but we don't have to solve every problem at once. As the
Sermon on the Mount says, "Sufficient unto the day is the evil thereof."

cheers

andrew

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2014-03-11 17:23:06 Re: Retain dynamic shared memory segments for postmaster lifetime
Previous Message Stephen Frost 2014-03-11 16:37:25 Re: db_user_namespace a "temporary measure"