| From: | Martijn van Oosterhout <kleptog(at)svana(dot)org> |
|---|---|
| To: | Gevik Babakhani <pgdev(at)xs4all(dot)nl> |
| Cc: | Alvaro Herrera <alvherre(at)commandprompt(dot)com>, pgsql-hackers(at)postgresql(dot)org, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Subject: | Re: Please advice TODO Item pg_hba.conf |
| Date: | 2006-04-23 21:57:32 |
| Message-ID: | 20060423215732.GD23074@svana.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On Sun, Apr 23, 2006 at 11:40:08PM +0200, Gevik Babakhani wrote:
> > Also I'm not sure if we have discussed what's the default (initial)
> > privilege state. Do we want PUBLIC to have CONNECT privilege?
>
> If I where a DBA I would rather explicitly give people connect
> permission to my database rather than having to explicitly block them
> from connecting to the database. It is like all the doors are closed to
> the public unless the doorman opens the door for the person he knows.
> But then again this is my personal opinion. We can always discuss this
> of course.
Backward compatability. The code has to end up working exactly as the
system behaves now (i.e. pg_hba.conf controls everything). Maybe a
release or two down the track we can change the default, but right now
you can't.
Have a nice day,
--
Martijn van Oosterhout <kleptog(at)svana(dot)org> http://svana.org/kleptog/
> From each according to his ability. To each according to his ability to litigate.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Alvaro Herrera | 2006-04-23 22:05:22 | Re: Please advice TODO Item pg_hba.conf |
| Previous Message | Alvaro Herrera | 2006-04-23 21:45:24 | Re: Google SoC--Idea Request |