access control
About commercial databases lacking access control
functionality to a degree "similar" to PG: hmm, I dunno
about that. Seems like kind of a slur on the commercial
products :-)
The two Big Names (Oracle and Sybase) have pretty well-
developed access control. I can't speak to Oracle in detail,
but I've used Sybase for years and it has an internal AC
mechanism at least as functional as the *nix file system. It
offers access control over databases as well as tables, and
good granularity (many modes and degrees of access/privilege,
user vs group, etc). Maybe an Oracle person can tell us how
that engine does access control, but I was under the
impression that it uses internal auth tables, like Sybase.
I have never liked tying access to external OS usernames.
Maybe it's just a personal idiosyncrasy :-) I'd jump for joy
if PG access control became OS-independent, with usernames,
groups, and passcodes maintained internally to the engine...
just my $0.02.
de
PS I'd also jump for joy if SQL statements could access
tables from more than one DB. I can dream, can't I?
.............................................................................
:De Clarke, Software Engineer UCO/Lick Observatory, UCSC:
:Mail: de@ucolick.org | "There is no problem in computer science that cannot:
:Web: www.ucolick.org | be solved by another level of indirection" --J.O. :
On Mon, 12 Jan 1998, De Clarke wrote:
I have never liked tying access to external OS usernames.
Maybe it's just a personal idiosyncrasy :-) I'd jump for joy
if PG access control became OS-independent, with usernames,
groups, and passcodes maintained internally to the engine...
just my $0.02.
Ummmm...this was added in for v6.3 for over a month now :)
Marc G. Fournier
Systems Administrator @ hub.org
primary: scrappy@hub.org secondary: scrappy@{freebsd|postgresql}.org
I have never liked tying access to external OS usernames.
Maybe it's just a personal idiosyncrasy :-) I'd jump for
joy...
Ummmm...this was added in for v6.3 for over a month now :)
blush, shuffle, stammer!
sorry, I've been buried in other projects and have been
out of touch. I have 6.2.1 running at work and home, but
haven't caught up with the 6.3 features list yet!
visualize me jumping for joy :-)
de
.............................................................................
:De Clarke, Software Engineer UCO/Lick Observatory, UCSC:
:Mail: de@ucolick.org | "There is no problem in computer science that cannot:
:Web: www.ucolick.org | be solved by another level of indirection" --J.O. :