Re: Permissions & Ownership (BUG?)

From: Jeff Waugh <jdub(at)perkypants(dot)org>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: Permissions & Ownership (BUG?)
Date: 2001-06-14 09:41:30
Message-ID: 20010614194130.F5679@aphid.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

<quote who="Mart?n Marqu?s">

> Check out pg_hba.conf file. You can limit connections on database and locaion
> of the connection.

That's true for external connections, but... If I can authenticate, I can
'connect' to any of the databases hosted, which means that whilst I only own
'foo' database, I can look at 'bar', and see the tables, etc.

> > 2) Given this connection, it seems that any user can also CREATE a table in
> > any database, regardless of owner. They couldn't modify or delete objects,
> > but they can create them.
>
> Yes, I have pointed out this in the past. I hope it's in the tod list at
> least.

Ah, so it's not just me! :) Thanks for that.

- Jeff

--
If Perl is gaffer, and Python is Magic Tape, then Ruby is self-adhesive
plate gold.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Muhammad Rusydi 2001-06-14 10:23:53 newbie:how can i get day of week data type...
Previous Message Penguin 2001-06-14 09:06:50 plpgsql & documentation / tutor