@@ -1106,3 +1106,157 @@ extensions afterwards?
11061106
11071107 regards, tom lane
11081108
1109+ From zakkr@zf.jcu.cz Wed May 9 05:12:41 2001
1110+ Return-path: <zakkr@zf.jcu.cz>
1111+ Received: from ara.zf.jcu.cz (zakkr@ara.zf.jcu.cz [160.217.161.4])
1112+ by candle.pha.pa.us (8.10.1/8.10.1) with ESMTP id f499Cbu05406
1113+ for <pgman@candle.pha.pa.us>; Wed, 9 May 2001 05:12:37 -0400 (EDT)
1114+ Received: (from zakkr@localhost)
1115+ by ara.zf.jcu.cz (8.9.3/8.9.3/Debian 8.9.3-21) id LAA20000;
1116+ Wed, 9 May 2001 11:12:35 +0200
1117+ Date: Wed, 9 May 2001 11:12:35 +0200
1118+ From: Karel Zak <zakkr@zf.jcu.cz>
1119+ To: Bruce Momjian <pgman@candle.pha.pa.us>
1120+ cc: pgsql-hackers <pgsql-hackers@postgresql.org>
1121+ Subject: Re: [HACKERS] NOCREATETABLE patch (was: Re: Please, help!(about Postgres))
1122+ Message-ID: <20010509111235.A18101@ara.zf.jcu.cz>
1123+ References: <Pine.LNX.3.96.1010129230017.31607B-100000@ara.zf.jcu.cz> <200105071848.f47ImBh20345@candle.pha.pa.us>
1124+ MIME-Version: 1.0
1125+ Content-Type: text/plain; charset=us-ascii
1126+ User-Agent: Mutt/1.0.1i
1127+ In-Reply-To: <200105071848.f47ImBh20345@candle.pha.pa.us>; from pgman@candle.pha.pa.us on Mon, May 07, 2001 at 02:48:11PM -0400
1128+ Status: ORr
1129+
1130+ On Mon, May 07, 2001 at 02:48:11PM -0400, Bruce Momjian wrote:
1131+ >
1132+ > Can someone remind me what we are going to do with this?
1133+ >
1134+ > > This patch add to 7.0.2 code NOCREATETABLE and NOLOCKTABLE feature:
1135+
1136+
1137+ It's my old patch, it's usable and some people use it for 7.0.x. But
1138+ it's really temporary solution and it was 1 day in official CVS :-)
1139+ We remove it after discussion with Peter E. More correct will implement
1140+ better privilege system.
1141+
1142+ A privilege system is *very* important for real multiuser and
1143+ sophisticated systems. For example if you compare PostgreSQL with Oracle,
1144+ the PostgreSQL is really not winner in this part. Peter has some idea
1145+ about it and Jan sent something about it too, but I not sure if somebody
1146+ works on this and plannig it for some next release (or...? -- will good
1147+ if I not right:-)
1148+
1149+ Karel
1150+
1151+ From pgsql-hackers-owner+M8485@postgresql.org Wed May 9 10:11:53 2001
1152+ Return-path: <pgsql-hackers-owner+M8485@postgresql.org>
1153+ Received: from postgresql.org (webmail.postgresql.org [216.126.85.28])
1154+ by candle.pha.pa.us (8.10.1/8.10.1) with ESMTP id f49EBqu24085
1155+ for <pgman@candle.pha.pa.us>; Wed, 9 May 2001 10:11:52 -0400 (EDT)
1156+ Received: from postgresql.org.org (webmail.postgresql.org [216.126.85.28])
1157+ by postgresql.org (8.11.3/8.11.1) with SMTP id f49EBiA44525;
1158+ Wed, 9 May 2001 10:11:44 -0400 (EDT)
1159+ (envelope-from pgsql-hackers-owner+M8485@postgresql.org)
1160+ Received: from corvette.mascari.com (dhcp065-024-161-045.columbus.rr.com [65.24.161.45])
1161+ by postgresql.org (8.11.3/8.11.1) with ESMTP id f49DVoA25183
1162+ for <pgsql-hackers@postgresql.org>; Wed, 9 May 2001 09:31:51 -0400 (EDT)
1163+ (envelope-from mascarm@mascari.com)
1164+ Received: from ferrari (ferrari.mascari.com [192.168.2.1])
1165+ by corvette.mascari.com (8.9.3/8.9.3) with SMTP id JAA11700;
1166+ Wed, 9 May 2001 09:20:46 -0400
1167+ Received: by localhost with Microsoft MAPI; Wed, 9 May 2001 09:29:01 -0400
1168+ Message-ID: <01C0D86A.7B6E19C0.mascarm@mascari.com>
1169+ From: Mike Mascari <mascarm@mascari.com>
1170+ Reply-To: "mascarm@mascari.com" <mascarm@mascari.com>
1171+ To: "'Zeugswetter Andreas SB'" <ZeugswetterA@wien.spardat.at>,
1172+ "'Bruce Momjian'"
1173+ <pgman@candle.pha.pa.us>
1174+ cc: Karel Zak <zakkr@zf.jcu.cz>,
1175+ pgsql-hackers
1176+ <pgsql-hackers@postgresql.org>
1177+ Subject: RE: [HACKERS] NOCREATETABLE patch (was: Re: Please, help!(about P ostgres))
1178+ Date: Wed, 9 May 2001 09:29:01 -0400
1179+ Organization: Mascari Development Inc.
1180+ X-Mailer: Microsoft Internet E-mail/MAPI - 8.0.0.4211
1181+ MIME-Version: 1.0
1182+ Content-Type: text/plain; charset="us-ascii"
1183+ Content-Transfer-Encoding: 7bit
1184+ Precedence: bulk
1185+ Sender: pgsql-hackers-owner@postgresql.org
1186+ Status: OR
1187+
1188+ That makes perfect sense to me. I was only going by what System
1189+ Privileges are granted to the Oracle roles of the same name. Oracle
1190+ has:
1191+
1192+ CONNECT -
1193+ ALTER SESSION
1194+ CREATE CLUSTER
1195+ CREATE DATABASE LINK
1196+ CREATE SEQUENCE
1197+ CREATE SESSION
1198+ CREATE SYNONYM
1199+ CREATE TABLE
1200+ CREATE VIEW
1201+
1202+ RESOURCE -
1203+ CREATE CLUSTER
1204+ CREATE PROCEDURE
1205+ CREATE SEQUENCE
1206+ CREATE TABLE
1207+ CREATE TRIGGER
1208+
1209+ DBA -
1210+ All systems privileges WITH ADMIN OPTION
1211+
1212+ But I agree with you. When I was first learning Oracle, I thought it
1213+ strange that the CONNECT role had anything more than CREATE/ALTER
1214+ SESSION privilege.
1215+
1216+ Mike Mascari
1217+ mascarm@mascari.com
1218+
1219+ -----Original Message-----
1220+ From: Zeugswetter Andreas SB [SMTP:ZeugswetterA@wien.spardat.at]
1221+ Sent: Wednesday, May 09, 2001 3:20 AM
1222+ To: 'Bruce Momjian'; mascarm@mascari.com
1223+ Cc: Karel Zak; pgsql-hackers
1224+ Subject: AW: [HACKERS] NOCREATETABLE patch (was: Re: Please,
1225+ help!(about P ostgres))
1226+
1227+
1228+ > > The connect group would be granted these System Privileges:
1229+
1230+ If we keep it like others (e.g. Informix) this System Privilege would
1231+ be called
1232+ "resource". I like this name better, because it more describes the
1233+ detailed
1234+ priviledges.
1235+
1236+ > >
1237+ > > CREATE AGGREGATE privilege
1238+ > > CREATE INDEX privilege
1239+ > > CREATE FUNCTION privilege
1240+ > > CREATE OPERATOR privilege
1241+ > > CREATE RULE privilege
1242+ > > CREATE SESSION privilege
1243+ > > CREATE SYNONYM privilege
1244+ > > CREATE TABLE privilege
1245+ > > CREATE TRIGGER privilege
1246+ > > CREATE TYPE privilege
1247+ > > CREATE VIEW privilege
1248+
1249+ The "connect" group would only have the priviledge to connect to the
1250+ db [and
1251+ create temp tables ?] and rights they where granted, or that were
1252+ granted to public.
1253+ They would not be allowed to create anything.
1254+
1255+ Andreas
1256+
1257+
1258+ ---------------------------(end of broadcast)---------------------------
1259+ TIP 6: Have you searched our list archives?
1260+
1261+ http://www.postgresql.org/search.mpl
1262+
0 commit comments