Feature request #955: PostGIS view only accessible by superuser or table owner - QGIS Application - QGIS Issue Tracking

Feature request #955

PostGIS view only accessible by superuser or table owner

Added by Bernhard Ströbl over 16 years ago. Updated over 16 years ago.

Status:	Closed
Priority:	Low
Assignee:	Jürgen Fischer
Category:	Data Provider
Pull Request or Patch supplied:		Resolution:	fixed
Easy fix?:	No	Copied to github as #:	11014

Description

Only a DB-superuser and the owner of the underlying table can access a PostGIS view. Everybody else gets a message stating there was no suitable key column in the view. This message led me to qgspostgresprovider.cpp which accesses information_schema.view_column_usage. However Postgres documentation states
... A column is only included if the table that contains the column is owned by a currently enabled role.
I logged into a Postres-DB three times and executed
SELECT * FROM information_schema.view_column_usage WHERE view_name = <name_of_the_view>

as non-superuser with select rights on the tables and views: SELECT returned no results.
as the table owner (non-superuser) SELECT returns all columns

as superuser (non-table-owner) SELECT returns all columns

Associated revisions

Revision 1ff7509b
Added by Jürgen Fischer over 16 years ago

- applied patch from Steven Mizuno from #964. Nice work. Thank you very much.
- better privilege handling (fixes #955)
- better postgis i18n (unicode handling, identifier quotation)
- password saving fixed
- support for int8 type added
- let provider capabilities follow table privileges (fixes #976)
- use prepared statements for adding features (fixed #977)
- remove connection pooling (fixes cursor problem)
- clear attribute list on loadFields (fixes #984)
- ignore bytea fields
- handle transactions/error reporting better
- some cleanups