Re: [GENERAL] Defining roles

2009-10-27 Thread Sam Mason
On Mon, Oct 26, 2009 at 10:32:05AM -0500, Michael Gould wrote: > In our system we have a hybrid security system. [...] > Trying to maintain the database > to match the application security would become cumbersome for our customers. Have you looked at using functions protected by "security definer"

[GENERAL] Defining roles

2009-10-26 Thread Michael Gould
In our system we have a hybrid security system. We have tables that I want to make sure that based on membership in a group that update and/or delete is not allowed to a specific group. We also have application level security which is much more granular and is much more job function based. Our app