From: | "Dan Wilson" <phpPgAdmin(at)acucore(dot)com> |
---|---|
To: | "Martin A(dot) Marques" <martin(at)math(dot)unl(dot)edu(dot)ar>, "Michael Fork" <mfork(at)toledolink(dot)com> |
Cc: | <pgsql-hackers(at)postgresql(dot)org>, <pgsql-general(at)postgresql(dot)org> |
Subject: | Re: Re: grant privileges to a database |
Date: | 2001-01-31 22:39:46 |
Message-ID: | 000701c08bd6$b6dea280$543987cf@corp.peoplesoft.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general pgsql-hackers |
: El Mié 31 Ene 2001 18:32, Dan Wilson escribió:
: > You can do this in phpPgAdmin... it's a hack because it just pulls in
all
: > the objects/relations and runs a single grant statement on them, but it
: > works. It puts together a query like the following:
: >
: > GRANT ALL ON table1, table2, table3, view1, view2, sequence1, sequence2
TO
: > user
: >
: > Which I suppose you can do manually if you don't have phpPgAdmin
installed.
: >
: > It ain't the prettiest, but it works!
:
: The problem is that this is not what I'm looking for. I want the user to
be
: able to create new tables, views, sequences, etc on that database.
Oh, if you want to do that, then you don't have to do any granting of
priviledges. It seems that Postgres allows any user to create a table on a
database. Even if the user is not the owner of the database. AFAIK, there
are no acl's associated with the database.
I've posed this question before and have not received any response, but is
this an undocumented feature or a sercurity bug? Personally, I don't think
anyone should be able to create relations on a database they do not own.
-Dan
From | Date | Subject | |
---|---|---|---|
Next Message | Hiroshi Inoue | 2001-01-31 23:14:54 | Re: Creating indeces on existing tables... |
Previous Message | Martin A. Marques | 2001-01-31 22:18:12 | Re: Re: grant privileges to a database |
From | Date | Subject | |
---|---|---|---|
Next Message | Steve Shaffer | 2001-01-31 22:58:06 | ODBC Problem v7.1 beta4 |
Previous Message | Martin A. Marques | 2001-01-31 22:18:12 | Re: Re: grant privileges to a database |