Re: [GENERAL] Views and permissions

2008-01-22 Thread Albe Laurenz
Christian Schröder wrote: > Indeed, you are right! Granting select permission to the "ts_frontend" > user (more precisely: granting membership to the "zert_readers" role) > solved the problem. > >> This is strange because ts_frontend can select from "EDITORS" because >> of the membership to role

Re: [GENERAL] Views and permissions

2008-01-21 Thread Christian Schröder
Tom Lane wrote: Table accesses done by a view are checked according to the privileges of the owner of the view, not of whoever invoked the view. It's a bit inconsistent because function calls done in the view are not handled that way (though I hope we change them to match, someday). Phew, som

Re: [GENERAL] Views and permissions

2008-01-21 Thread Tom Lane
=?ISO-8859-1?Q?Christian_Schr=F6der?= <[EMAIL PROTECTED]> writes: > Albe Laurenz wrote: >> This is strange because ts_frontend can select from "EDITORS" because >> of the membership to role zert_readers. >> > No, the user "ts_frontend" is (was) not a member of the group > "zert_readers", but the

Re: [GENERAL] Views and permissions

2008-01-21 Thread Christian Schröder
Albe Laurenz wrote: User ts_frontend, the owner of the view ts_frontend.v_editors, does not have the SELECT privilege on the underlying table public."EDITORS". Because of that neither he nor anybody else can select from the view, although ts_frontend is able to create the view. Indeed, you ar

Re: [GENERAL] Views and permissions

2008-01-21 Thread Albe Laurenz
Christian Schröder wrote: >> Can you show us the permissions for "ts_frontend.v_editors" as well >> as for any "EDITORS" table you find (e.g. using \z in psql). >> > Access privileges for database "zertifikate" > Schema | Name | Type | Access pr

Re: [GENERAL] Views and permissions

2008-01-21 Thread Christian Schröder
Albe Laurenz wrote: One possibility I see is that there is more than one table called "EDITORS" and they get confused. What do you get when you SELECT t.oid, n.nspname, t.relname FROM pg_catalog.pg_class t JOIN pg_catalog.pg_namespace n ON t.relnamespace = n.oid WHERE t.relname='EDITORS';

Re: [GENERAL] Views and permissions

2008-01-21 Thread Albe Laurenz
Christian Schröder wrote: > yesterday I moved our database from one server to another. I > did a full > dump of the database and imported the dump into the new server. Since > then I have a strange problem which I cannot explain ... > I have a table public."EDITORS": > > Table

[GENERAL] Views and permissions

2008-01-21 Thread Christian Schröder
Hi list, yesterday I moved our database from one server to another. I did a full dump of the database and imported the dump into the new server. Since then I have a strange problem which I cannot explain ... I have a table public."EDITORS": Table "public.EDITORS" Column |