Re: can't "grant all on database..."

From: Stephan Szabo <sszabo(at)megazone23(dot)bigpanda(dot)com>
To: Travis Hume <travis(dot)hume(at)tenzing(dot)com>
Cc: <pgsql-general(at)postgresql(dot)org>
Subject: Re: can't "grant all on database..."
Date: 2003-06-18 22:06:16
Message-ID: 20030618150343.X40850-100000@megazone23.bigpanda.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general


On Wed, 18 Jun 2003, Travis Hume wrote:

> So I ended up doing this:
>
> create user ruser createuser;
>
> and then limiting where he can connect from through pg_hba.conf file.

I think createuser implies superuser access. If you do that, you're
probably also going to want to control what databases he can connect to
not just from where (if you haven't already). And, you need to be
careful with untrusted pl languages, but it might be easiest to just not
build any.

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Travis Hume 2003-06-18 22:25:27 Re: can't "grant all on database..."
Previous Message Travis Hume 2003-06-18 22:01:04 Re: can't "grant all on database..."