Re: [HACKERS] ASYNC Privileges proposal

2013-06-27 Thread Josh Berkus
On 06/27/2013 02:49 AM, Chris Farmiloe wrote: > So I would think that if this was to go further then "channels" would need > to be more of a first class citizen and created explicitly, with CREATE > CHANNEL, DROP CHANNEL etc: > > CREATE CHANNEL channame; > GRANT LISTEN ON CHANNEL channame

Re: [HACKERS] ASYNC Privileges proposal

2013-06-27 Thread Chris Farmiloe
So I would think that if this was to go further then "channels" would need to be more of a first class citizen and created explicitly, with CREATE CHANNEL, DROP CHANNEL etc: CREATE CHANNEL channame; GRANT LISTEN ON CHANNEL channame TO rolename; GRANT NOTIFY ON CHANNEL channame TO rolen

Re: [HACKERS] ASYNC Privileges proposal

2013-06-18 Thread Josh Berkus
>> I had a quick play to see what might be involved [attached], and would like >> to >> hear people thoughts; good idea, bad idea, not like that! etc > > I question the usefulness of allowing listen/notify to be restricted to > an entire class of users. The granularity of this seems too broad

Re: [HACKERS] ASYNC Privileges proposal

2013-05-28 Thread Bruce Momjian
On Mon, May 20, 2013 at 02:44:58AM +0100, Chris Farmiloe wrote: > Hey all, > > I find the current LISTEN / NOTIFY rather limited in the context of databases > with multiple roles. As it stands it is not possible to restrict the use of > LISTEN or NOTIFY to specific roles, and therefore notificatio

Re: [HACKERS] ASYNC Privileges proposal

2013-05-20 Thread Craig Ringer
On 05/20/2013 09:54 AM, Chris Farmiloe wrote: > Hey all, > > I find the current LISTEN / NOTIFY rather limited in the context of > databases with multiple roles. As it stands it is not possible to restrict > the use of LISTEN or NOTIFY to specific roles, and therefore notifications > (and their pay

Re: [HACKERS] ASYNC Privileges proposal

2013-05-19 Thread Chris Farmiloe
In fairness NOTIFY has only had a payload since v9 (maybe 8.4?), and the issue of trust is mainly tied to data leaking from the payload, so I suspect I won't be last person to request this as people re-visit NOTIFY :) ...but I totally get your point of course. My first thought was also that having

Re: [HACKERS] ASYNC Privileges proposal

2013-05-19 Thread Tom Lane
Chris Farmiloe writes: > I find the current LISTEN / NOTIFY rather limited in the context of > databases with multiple roles. As it stands it is not possible to restrict > the use of LISTEN or NOTIFY to specific roles, and therefore notifications > (and their payloads) cannot really be trusted as