
About commercial databases lacking access control 
functionality to a degree "similar" to PG:  hmm, I dunno
about that.  Seems like kind of a slur on the commercial
products :-)
  
The two Big Names (Oracle and Sybase) have pretty well- 
developed access control.  I can't speak to Oracle in detail, 
but I've used Sybase for years and it has an internal AC 
mechanism at least as functional as the *nix file system. It 
offers access control over databases as well as tables, and 
good granularity (many modes and degrees of access/privilege, 
user vs group, etc).  Maybe an Oracle person can tell us how 
that engine does access control, but I was under the 
impression that it uses internal auth tables, like Sybase. 

I have never liked tying access to external OS usernames.  
Maybe it's just a personal idiosyncrasy :-) I'd jump for joy 
if PG access control became OS-independent, with usernames, 
groups, and passcodes maintained internally to the engine...  
just my $0.02.  

de

PS I'd also jump for joy if SQL statements could access
tables from more than one DB.  I can dream, can't I?

.............................................................................
:De Clarke, Software Engineer                     UCO/Lick Observatory, UCSC:
:Mail: de@ucolick.org | "There is no problem in computer science that cannot: 
:Web: www.ucolick.org |  be solved by another level of indirection"  --J.O. :




Mon, 12 Jan 1998 19:07:36 -0800 (PST)
De Clarke <de@ucolick.org>
access control
On Mon, 12 Jan 1998, De Clarke wrote:

> I have never liked tying access to external OS usernames.  
> Maybe it's just a personal idiosyncrasy :-) I'd jump for joy 
> if PG access control became OS-independent, with usernames, 
> groups, and passcodes maintained internally to the engine...  
> just my $0.02.  

	Ummmm...this was added in for v6.3 for over a month now :)

Marc G. Fournier                                
Systems Administrator @ hub.org 
primary: scrappy@hub.org           secondary: scrappy@{freebsd|postgresql}.org 


Mon, 12 Jan 1998 23:20:30 -0400 (AST)
The Hermit Hacker <scrappy@hub.org>
Re: [HACKERS] access control

>> I have never liked tying access to external OS usernames.  
>> Maybe it's just a personal idiosyncrasy :-) I'd jump for 
>> joy...

> Ummmm...this was added in for v6.3 for over a month now :)

blush, shuffle, stammer!

sorry, I've been buried in other projects and have been
out of touch.  I have 6.2.1 running at work and home, but
haven't caught up with the 6.3 features list yet!  
visualize me jumping for joy :-)

de

.............................................................................
:De Clarke, Software Engineer                     UCO/Lick Observatory, UCSC:
:Mail: de@ucolick.org | "There is no problem in computer science that cannot: 
:Web: www.ucolick.org |  be solved by another level of indirection"  --J.O. :




Tue, 13 Jan 1998 10:55:48 -0800 (PST)
De Clarke <de@ucolick.org>
Re: [HACKERS] access control 