계층적 액세스 제어

PostgreSQL 데이터베이스 만들기

Darryl Reeves

Industry Assistant Professor, New York University

스키마로 액세스 제어

CREATE SCHEMA me;

CREATE SCHEMA spouse;

CREATE TABLE me.account (...);

CREATE TABLE spouse.account (...);

CREATE USER better_half WITH PASSWORD 'changeme';

GRANT USAGE ON SCHEMA spouse TO better_half;

GRANT USAGE ON SCHEMA public TO better_half;

GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA spouse;

TO better_half;

GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public

TO better_half;

스키마 기반 액세스 제어 구현 완료

CREATE GROUP family;

GRANT USAGE ON SCHEMA public TO family;

GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA

public TO family;

ALTER GROUP family ADD USER fin
ALTER GROUP family ADD USER better_half;

PostgreSQL 데이터베이스 만들기