[postgis-users] Securing postgis

[Karl O. Pinc]

On 03/02/2011 09:55:57 AM, Mark Cave-Ayland wrote:
> On 02/03/11 15:17, Karl O. Pinc wrote:
> 
> > Yes, I've been thinking more about this and have come to
> > the same conclusion you have.  The right way to go is
> > to put triggers on geometry_columns that check permissions
> > against what's granted on the column holding the geometry
> > data.
> >
> > Any clue if this would be something I could send in
> > as a patch to the postgis project?
> 
> Probably not, as I believe Paul is planning to switch the binary 
> representation of the geometry type in 2.0 which would then enable us
> to 
> make geometry_columns a view just like geography_columns.
> 
> However, it would probably be of interest to enough people to add it 
> somewhere to the user part of the wiki.

Humm. Ok.

I'm unfamiliar with geography_columns.  What is the security
model?  Can anyone do anything like with geography_columns?

If it's a view then would it be possible to put triggers
on the underlying tables?  Where would I look in the code?

Thanks.


Karl <kop at meme.com>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein