At 12:11 PM +0200 4/19/02, Mario Weilguni wrote:
>would'nt it be much better to expand pg_largeobject to have another column "src_oid" 
>(or similar), containing the OID of the referencing table from pg_class, and when 
>accessing large objects take the privilieges from the referencing class?

It's possible that several tables could reference the same object.  And besides, I 
don't think postgres can tell the difference between a column that contains a large 
object id and a plain old integer.

Also, I don't think table-level permissions are flexible enough to be truly useful.  
What if I want certain objects to be visible only to certain users, but I want all 
objects to be referenced from the same table?  I can enforce row-level security on the 
table with a view. I'd like the same level of flexibility for large objects.

Another thought: What if I want to restrict access to large objects based on size or 
timestamp?

-Damon

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
    (send "unregister YourEmailAddressHere" to [EMAIL PROTECTED])

Reply via email to