Re: [HACKERS] current_user versus current_role SOLVED

[Pavel Stehule]

Hi,

 I used info from current_user for log. about some operations (who, when,
 ..). What I can see, current_user is equal current_role function. I had
 problem with it, because user (if is member of any group role) can 
change
 his identity. example: peter is member of role users. But peter can do 
set
 role to users. From this moment I lost possibility of get identity if 
user,
 because current_user returns users and not peter. I can check it (if 
some
 user changed identity) ~ by exampl. test if role has login privilegia, 
and

 if not I can stop any operations.

I believe you can use session_user for this.

--

it's exactly it what I want.

Thank You
Pavel Stehule

_
Najdete si svou lasku a nove pratele na Match.com. http://www.msn.cz/


---(end of broadcast)---
TIP 9: In versions below 8.0, the planner will ignore your desire to
  choose an index scan if your joining column's datatypes do not
  match

[HACKERS] current_user versus current_role

[Pavel Stehule]

hello

I used info from current_user for log. about some operations (who, when, 
..). What I can see, current_user is equal current_role function. I had 
problem with it, because user (if is member of any group role) can change 
his identity. example: peter is member of role users. But peter can do set 
role to users. From this moment I lost possibility of get identity if user, 
because current_user returns users and not peter. I can check it (if some 
user changed identity) ~ by exampl. test if role has login privilegia, and 
if not I can stop any operations.


But Is there some possibility get identity of user without impact of change 
of role? (default role?)


thank you
Pavel Stehule

_
Chcete sdilet sve obrazky a hudbu s prateli? http://messenger.msn.cz/


---(end of broadcast)---
TIP 5: don't forget to increase your free space map settings

Re: [HACKERS] current_user versus current_role

[Alvaro Herrera]

On Wed, Oct 05, 2005 at 03:17:25PM +0200, Pavel Stehule wrote:

Hi,

 I used info from current_user for log. about some operations (who, when, 
 ..). What I can see, current_user is equal current_role function. I had 
 problem with it, because user (if is member of any group role) can change 
 his identity. example: peter is member of role users. But peter can do set 
 role to users. From this moment I lost possibility of get identity if user, 
 because current_user returns users and not peter. I can check it (if some 
 user changed identity) ~ by exampl. test if role has login privilegia, and 
 if not I can stop any operations.

I believe you can use session_user for this.

-- 
Alvaro Herrera   Developer, http://www.PostgreSQL.org
Amanece.   (Ignacio Reyes)
 El Cerro San Cristóbal me mira, cínicamente, con ojos de virgen

---(end of broadcast)---
TIP 2: Don't 'kill -9' the postmaster