| From: | Scott Marlowe <smarlowe(at)g2switchworks(dot)com> |
|---|---|
| To: | Tino Wildenhain <tino(at)wildenhain(dot)de> |
| Cc: | Richard Huxton <dev(at)archonet(dot)com>, Margus Roo <margusja(at)kodila(dot)ee>, pgsql-general(at)postgresql(dot)org |
| Subject: | Re: psql -U user -l cive all db list |
| Date: | 2005-05-17 14:28:39 |
| Message-ID: | 1116340119.22291.111.camel@state.g2switchworks.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
On Tue, 2005-05-17 at 09:18, Tino Wildenhain wrote:
> Am Dienstag, den 17.05.2005, 08:58 -0500 schrieb Scott Marlowe:
> > On Tue, 2005-05-17 at 04:52, Richard Huxton wrote:
> > > Margus Roo wrote:
> > > >
> > > > What I must change that non root user will see only own databases?
> > >
> > > You can't at the moment. There has been some discussion about this, but
> > > at present read access to the system catalogues is available to everyone.
> > >
> > > That doesn't mean they can connect to the database (that's controlled by
> > > your pg_hba.conf file). It does mean you can see what databases are
> > > available though.
> >
> > Everyone realizes that even Oracle doesn't provide this functionality,
> > right?
> >
> And you can get close to that if you carefully moc around with
> the system tables and views and their permissions.
> But if you do it wrong - restore is your friend :-)
All for a feature of questionable value.
Better to worry about the real security than worry about such things I
think.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Kathy Boyle | 2005-05-17 14:33:30 | initdb: failed |
| Previous Message | Tino Wildenhain | 2005-05-17 14:18:51 | Re: psql -U user -l cive all db list |