Re: access rights

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: ctnan(at)adinet(dot)com(dot)uy
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: access rights
Date: 2004-09-20 15:49:13
Message-ID: 20040920154913.GA30575@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Sun, Sep 19, 2004 at 02:01:10 -0300,
ctnan(at)adinet(dot)com(dot)uy wrote:
> I need a data base to install with my application, but i want that it can
> be accessed only by the application. Because it runs on the customer computer
> and i dont want he be able to watch into my database. It is posible. I mean:
> if my postgres database is on his Windows 2000 and he has the Administrator
> password. He have the posibility to view database structure or data? The
> only way to access my postgres database is having the postgres administrator
> password?
>
> Sorry for english and thanks for your time

You can't trust code that is running on hardware under control of an
adversary. There are some things you can do to limit the use of the
database by your adversary (i.e. customer). You might want to read the
book "Translucent Databases".

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message rjyoung 2004-09-20 16:04:36 Postgres setup question
Previous Message Tom Lane 2004-09-20 14:40:25 Re: pg_dumpall failed