database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-08-31 17:02:12 +03:00
Code Activity

Warn that views can be safely used to hide columns, but not rows.

Browse Source
This commit is contained in:
Robert Haas
2010-10-08 09:15:17 -04:00
parent 9cc8c84e73
commit 56ccff5980
2 changed files with 51 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
doc/src/sgml/ref/create_view.sgml
View File

@@ -143,10 +143,12 @@ CREATE VIEW vista AS SELECT text 'Hello World' AS hello;
<para>
Access to tables referenced in the view is determined by permissions of
the view owner. However, functions called in the view are treated the
same as if they had been called directly from the query using the view.
Therefore the user of a view must have permissions to call all functions
used by the view.
the view owner. In some cases, this can be used to provide secure but
restricted access to the underlying tables. However, not all views are
secure against tampering; see <xref linkend="rules-privileges"> for
details. Functions called in the view are treated the same as if they had
been called directly from the query using the view. Therefore the user of
a view must have permissions to call all functions used by the view.
</para>
<para>