"Ing. Daniel Manrique" <dmanriqu(at)correo(dot)fca(dot)unam(dot)mx> writes:
> I'd like to configure things so that:
> a) users are unable to modify template1;
If you're on a PG version where template1 isn't the default connection
target, you could just disallow connections to it. But that might just
mean that your problem moves over to the "postgres" database.
> b) Users can't connect to databases other than the ones they created
> (and perhaps the postgres database, for initial connection purposes).
See CONNECT privilege (as of 8.2) and/or modify pg_hba.conf.
regards, tom lane