From: | Jeff Waugh <jdub(at)perkypants(dot)org> |
---|---|
To: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: Permissions & Ownership (BUG?) |
Date: | 2001-06-14 09:41:30 |
Message-ID: | 20010614194130.F5679@aphid.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
<quote who="Mart?n Marqu?s">
> Check out pg_hba.conf file. You can limit connections on database and locaion
> of the connection.
That's true for external connections, but... If I can authenticate, I can
'connect' to any of the databases hosted, which means that whilst I only own
'foo' database, I can look at 'bar', and see the tables, etc.
> > 2) Given this connection, it seems that any user can also CREATE a table in
> > any database, regardless of owner. They couldn't modify or delete objects,
> > but they can create them.
>
> Yes, I have pointed out this in the past. I hope it's in the tod list at
> least.
Ah, so it's not just me! :) Thanks for that.
- Jeff
--
If Perl is gaffer, and Python is Magic Tape, then Ruby is self-adhesive
plate gold.
From | Date | Subject | |
---|---|---|---|
Next Message | Muhammad Rusydi | 2001-06-14 10:23:53 | newbie:how can i get day of week data type... |
Previous Message | Penguin | 2001-06-14 09:06:50 | plpgsql & documentation / tutor |