Re: Restricting Groups / Users

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
Cc: Hadley Willan <hadley(dot)willan(at)deeperdesign(dot)co(dot)nz>, PGSQL Admin <pgsql-admin(at)postgresql(dot)org>
Subject: Re: Restricting Groups / Users
Date: 2004-03-10 05:47:59
Message-ID: 2833.1078897679@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> Hadley Willan wrote:
>> I'm running pgsql 7.4.1 and I was wondering if it is possible to
>> restrict users from creating tables.

> Yes, you can control permissions on the public schema and the other
> schemas.

Specifically, revoke their CREATE rights on public (as well as any other
schemas you've created) and revoke their CREATE rights on the database
so they can't create any new schemas to create tables in.

If you are feeling draconian enough to want to prohibit creation of temp
tables as well as regular tables, then also remove TEMP rights at the
database level. I'm dubious about the usefulness of this though.

regards, tom lane

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Peter Eisentraut 2004-03-10 07:42:40 Re: tcp port
Previous Message Erwin Brandstetter 2004-03-10 05:40:44 Re: History Tables Vs History Field