[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re-authentication proposal for LedgerSMB 1.3 (HTTP Auth)





On 10/4/07, Toni Mueller <..hidden..> wrote:

Has PostgreSQL some sort of a 'sudo' feature? That could solve the
problem along the lines of "does this username/password pair
authenticate? if yes, execute the following query under the rights of
the associated role".

It depends on what you mean.  Not really in the way you say it (in that you can't pick an arbitrary user).  Instead, anyone can do anything as any role that user belongs to.

A second su-like option is set authorization as (but that requires that you start out as a superuser).

A third option is the use of permissions and security definer functions.  This is fairly similar to execute permissions and SUID programs.
 
Best wishes,
Chris Travers