From: | Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us> |
---|---|
To: | martin(at)biochemistry(dot)ucl(dot)ac(dot)uk |
Cc: | hackers(at)postgreSQL(dot)org |
Subject: | Re: [HACKERS] Re: [QUESTIONS] How is PostgreSQL doing? |
Date: | 1998-01-26 15:08:07 |
Message-ID: | 199801261508.KAA00335@candle.pha.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
>
> > I found this patch in my mailbox. Is there any intestest in this, or is
> > it too site-specific?
> >
> > >
> > > Eze Ogwuma writes:
> > > > Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us> writes:
> > > > > Can you be specific? Something I can add to the TODO list.
> > > >
> > > > Database based access for users so that each user can be giving access
> > > > to a particular database only. More permissions for each databse user:
> > > > Create, Drop, Select, Insert etc. Possibly table based
> > > > authentification as well.
> > >
> > > I needed to do that for the web database that I'm setting up. We have
> > > 20000 users and each (potentially) needs a separate database which is
> > > only accessible to them. Rather than having 20000 lines in pg_hba.conf,
> > > I've patched Postgres so that the special token "%username" in the
> > > database field of pg_hba.conf allows access only to the username which
> > > is connecting. (I chose the leading "%" so that it couldn't clash with
> > > a real database name.) Since the patch is against 6.1 rather than
> > > 6.2beta, I hadn't made it public. Here it is in case it's of interest.
> > >
>
> Yes please! I'd like to see this...
I think it may already be there, but with no documentation in
pg_hba.conf:
See backend/libpq/hba.c:
Special case: For usermap "sameuser", don't look in the usermap
file. That's an implied map where "pguser" must be identical to
"ident_username" in order to be authorized.
--
Bruce Momjian
maillist(at)candle(dot)pha(dot)pa(dot)us
From | Date | Subject | |
---|---|---|---|
Next Message | Darren King | 1998-01-26 15:36:04 | Re: [HACKERS] Group By, NULL values and inconsistent behaviour. |
Previous Message | Zeugswetter Andreas DBT | 1998-01-26 13:15:58 | Re: [HACKERS] A small type extension example for the contrib dire ctory (fwd) |