Re: TODO item pg_hba.conf

On Thu, 2006-04-20 at 14:14 -0400, Tom Lane wrote:
> "Gevik Babakhani" <pgdev(at)xs4all(dot)nl> writes:
> > Would it be correct to state that: only the authentication
> > is checked (username and password) when connecting to the
> > server and not the any kind of privilege to access a database.
>
> Well, that would be the typical usage, ie, people relying on CONNECT
> privilege probably wouldn't put any database-specific conditions into
> pg_hba.conf. But we'd not take out any functionality that's there now.
>

Of course.

> I'm not sure if you realize it, but this should be an extremely small
> patch. In particular, if you think you need to change the parser then
> you are already off on the wrong track. The parser doesn't know
> anything about specific privilege types (as of 8.1 anyway). It'd be
> worth your while to study how the existing privileges on databases
> are handled, eg, exactly what places know about the TEMP privilege.

To study the existing privileges is the first thing on my list. Because
I am new to this, it is sometimes difficult to know what is already
there, and what is possible or not. Your advice in GOLD. Thank you :)