Re: [GENERAL] column level, uid based authorization to update columns

2009-09-03 Thread Stephen Frost
* Gauthier, Dave (dave.gauth...@intel.com) wrote: > In linux, given the linux based uid of the user, how might someone implement > column level update restrictions on a uid basis? For example... The first issue is getting the linux uid to equate to a PG role. That can be done using 'ident' auth

Re: [GENERAL] column level, uid based authorization to update columns

2009-09-03 Thread David Fetter
On Thu, Sep 03, 2009 at 10:17:15AM -0700, Gauthier, Dave wrote: > In linux, given the linux based uid of the user, how might someone > implement column level update restrictions on a uid basis? For > example... You can use ident authentication in pg_hba.conf and per-column GRANT/REVOKE in 8.4. h

Re: [GENERAL] column level, uid based authorization to update columns

2009-09-03 Thread Ries van Twisk
On Sep 3, 2009, at 12:17 PM, Gauthier, Dave wrote: In linux, given the linux based uid of the user, how might someone implement column level update restrictions on a uid basis? For example... create table foo (strcol varchar(256), intcol integer); Now, I want linux processes runing under

[GENERAL] column level, uid based authorization to update columns

2009-09-03 Thread Gauthier, Dave
In linux, given the linux based uid of the user, how might someone implement column level update restrictions on a uid basis? For example... create table foo (strcol varchar(256), intcol integer); Now, I want linux processes runing under uid "joesmith" to be able to update strcol but not intco