Project

General

Profile

PatternMatch » History » Version 1

bford -, 05/11/2006 06:52 PM

1 1 bford -
= Pattern Match Feature =
2
3
Also known as allowable objects, this feature allows the administrator to configure the DSN to only see specific objects within the database. This feature was created because PostgreSQL allows any user to see objects within the database regardless of permission.
4
5
Note that this is a secure through obscure type feature and is not a replacement for good and solid role implementation.
6
7
{{{
8
it apply pattern from field ALLOWED_OBJECTS of connection string to all objects in FROM construction, except functions.
9
Query will be checked only if it have FROM construction.
10
11
- pattern case sensitive
12
- if pattern contains only table name, this table is in public scheme. E.g.
13
   info*.*, tabl_*
14
same as
15
   info*.*, public.tabl_*
16
- if query contains table name without schema name - for checking used public pattern.
17
18
19
}}}