I am designing an application which requires fine-grained role-based
security, where every logical object in the system has an ACL which
expresses the permissions allowed by roles.
Have you considered viel for Postgres ()? Here's what it says in it's introduction:
Introduction
Veil is a data security add-on for Postgres. It provides an API allowing you to control access to data at the row, or even column, level. Different users will be able to run the same query and see different results. Other database vendors describe this as a Virtual Private Database.Although it is in Alpha, you should give it a try, as this will also help the project in testing the functionality in real world apps like yours.
Regards,
--
gurjeet[.singh]@EnterpriseDB.com
singh.gurjeet@{ gmail | hotmail | yahoo }.com
