Subject | Re: [firebird-support] Grants |
---|---|
Author | Helen Borrie |
Post date | 2004-08-24T23:23:14Z |
At 02:31 PM 24/08/2004 -0300, you wrote:
If you want to prevent your GUEST user from being able to see certain
columns of a table, don't grant SELECT rights to that table: instead,
create a view containing the columns GUEST is allowed to see and grant
SELECT on the view.
./heLen
>I am logged as SYSDBA.The SELECT privilege applies to tables.
>I cannot execute one SQL: "GRANT SELECT (ID,ROTULO) ON TBL_CLIENTES TO
>GUEST"
>But I may execute: "GRANT UPDATE (ID,ROTULO) ON TBL_CLIENTES TO GUEST"The UPDATE privilege (alone) can be applied to columns.
>Why?That's the way privileges work. :-)
If you want to prevent your GUEST user from being able to see certain
columns of a table, don't grant SELECT rights to that table: instead,
create a view containing the columns GUEST is allowed to see and grant
SELECT on the view.
./heLen