PatternMatch » History » Revision 3
Revision 2 (bford -, 05/11/2006 06:57 PM) → Revision 3/6 (bford -, 05/11/2006 06:59 PM)
= Pattern Match Feature =
Also known as allowable objects, this feature allows the administrator to configure the DSN to only see specific objects within the database. This feature was created because PostgreSQL allows any user to see objects within the database regardless of permission.
'' Note that this is a secure through obscure type feature and is not a replacement for good and solid role implementation. ''
The rules for this feature are below:
* Applies to pattern expressed in ALLOWED_OBJECTS. Can be configured within the connection string or DSN management.
* Works against tables, schemas and sequences.
* A FROM parameter within the query must be in place for this to work:
* For example if you user connects using another method and creates a function that gets to the data you want seen this feature will not help you.
* For peformance reasons if there is not a FROM construction within the SQL statement, the statement will not be parsed by this feature.
* If no schema is specified, public schema is used by default.
Capabilities:
* Pattern is case sensitive
''Examples:''
{{{
public.acct*,hr.pay*
- if pattern contains only table name, this table is in public scheme. E.g.
info*.*, tabl_*
same as
info*.*, public.tabl_*
- if query contains table name without schema name - for checking used public pattern.
}}}