Tom wrote: > Peter Eisentraut <[EMAIL PROTECTED]> writes: > > That doesn't quite work, because then no ordinary user can define a cast > > from some built-in type to his own type. What I'm thinking about is to > > implement the USAGE privilege on types, and then you need to have that to > > be allowed to create casts. > > Still seems too weak.
Yes. > What about requiring ownership of at least one > of the types? I was thinking that too, but, would it be possible to circumvent such a restriction with a "type in the middle" attack ? Create your own type and then 1. (auto)cast type1 to own type 2. (auto)cast own type to type2 ? Andreas ---------------------------(end of broadcast)--------------------------- TIP 6: Have you searched our list archives? http://archives.postgresql.org
