Re: [GENERAL] Proper use of Groups and Users (Roles).

2016-02-16 Thread Vincent Veyron
On Tue, 16 Feb 2016 09:14:30 -0500 Melvin Davidson wrote: > The problem is TRUNCATE is more of an administrative privilege. Also, it is > not captured in a DELETE trigger, so you have a security issue with that. Ha, well, learn something new every day > Also, REFERENCES & TRIGGER are schema ch

Re: [GENERAL] Proper use of Groups and Users (Roles).

2016-02-16 Thread Melvin Davidson
The problem is TRUNCATE is more of an administrative privilege. Also, it is not captured in a DELETE trigger, so you have a security issue with that. Also, REFERENCES & TRIGGER are schema changes which should never be done by a normal user. On Tue, Feb 16, 2016 at 5:39 AM, Vincent Veyron wrote:

Re: [GENERAL] Proper use of Groups and Users (Roles).

2016-02-16 Thread Vincent Veyron
On Mon, 15 Feb 2016 12:06:28 -0500 Melvin Davidson wrote: > I wrote a short article to explain the proper use of Group and Userss in the > database. Hi Melvin, Thanks for the explanation, it makes things easy to understand. One question : > Although GRANT ALL, at first appears to simplify g

[GENERAL] Proper use of Groups and Users (Roles).

2016-02-15 Thread Melvin Davidson
Some years ago, while working at Computer Associates as a tech support specialist for the Ingres database, I wrote a short article to explain the proper use of Group and Userss in the database. I thought it would be worthwhile to do the same for PostgreSQL, as I've seen a lot of cases where this wa