Re: Proposal: access control jails (and introduction as aspiring GSoC student) - Mailing list pgsql-hackers

From Alvaro Herrera
Subject Re: Proposal: access control jails (and introduction as aspiring GSoC student)
Date
Msg-id [email protected]
Whole thread Raw
In response to Re: Proposal: access control jails (and introduction as aspiring GSoC student)  (Tom Lane <[email protected]>)
Responses Re: Proposal: access control jails (and introduction as aspiring GSoC student)
List pgsql-hackers
Tom Lane escribió:
> Alvaro Herrera <[email protected]> writes:
> > Robert Haas escribi�:

> >> But roles aren't database-specific...  they're globals.
> 
> > Well, that's another longstanding request ;-)  (See the
> > db_user_namespace hack)
> 
> Yeah, you'd have to fix that first.  The "ambitious" part of that is
> coming up with a spec that everybody will accept.  Once you had that,
> coding it might not be very hard ...

I wonder if this is simpler now that we got rid of the flat files stuff.
We could validate the user once we've connected to a database and thus
able to poke at the local user catalog, not just the global one.  I
think that was a serious roadblock.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: booleans in recovery.conf
Next
From: Tom Lane
Date:
Subject: Re: Proposal: access control jails (and introduction as aspiring GSoC student)