Chris Travers wrote: > On Tue, Feb 10, 2009 at 4:09 PM, Josh Berkus <[email protected]> wrote: >> Chris Travers wrote: >>> On Tue, Feb 10, 2009 at 1:36 PM, Roderick A. Anderson <[email protected]> >>> wrote: >>>> I understand that 1.3 (or maybe 1.4) will have access to tables >>>> controlled via a role. (Did I state that correctly?). >>>> >>>> While doing some searching I read that row-level security wasn't going >>>> to be available in PostgreSQL until 8.5. >> That's correct. There are a lot of very problematic issues around >> row-level security (not the least of which is Foriegn Keys) which we >> were not able to work out in time for 8.4. >> >> You can, of course, continue to use VIEWs to implement row-level >> security. However, trying to do that for a variety of ROLEs is somewhat >> difficult ... especially since auto-updatable VIEWs also didn't make the >> cut for 8.4. I recommend a function-based API. > > > What I have done in the past is to create a view and a shadow-table, > and the view calls a function for each row that checks permissions. > Views used in this way don't have to be messy.
Chris, Josh thanks. It isn't an application that needs to be super secure but it made sense to define/do it right the first time. But I'll probably go with a VIEW/Controller hybrid to get it out the door. Fortunately it will be an internal application. :-) Rod -- > > Best Wishes, > Chris Travers > > ------------------------------------------------------------------------------ > Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) > software. With Adobe AIR, Ajax developers can use existing skills and code to > build responsive, highly engaging applications that combine the power of local > resources and data with the reach of the web. Download the Adobe AIR SDK and > Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com > _______________________________________________ > Ledger-smb-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel ------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com _______________________________________________ Ledger-smb-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel
