From: | Renney Thomas <renneyt(at)yahoo(dot)com> |
---|---|
To: | Stephan Szabo <sszabo(at)megazone23(dot)bigpanda(dot)com> |
Cc: | Matt Perry <matt(at)primefactor(dot)com>, pgsql-admin(at)postgresql(dot)org |
Subject: | Re: Restricting database access to certain users |
Date: | 2003-05-27 03:23:12 |
Message-ID: | 3ED2DA20.5050707@yahoo.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
To make it easier, download pgadmin from pgadmin.postgresql.org. Get the
latest one. Look into creating a schema. You may have created tables in the
public schema. Create a different schema then grant create and usage
permissions to it accordingly. Revoke the same from public.
Stephan Szabo wrote:
> On Mon, 26 May 2003, Matt Perry wrote:
>
>
>>I'm looking into migrating several users from MySQL to Postgres and I'm
>>running into a problem with security. I don't think I understand how
>>security is handled within postgres. I'm using PostgreSQL v7.1.3 on a Red
>>Hat 7.2 system.
>>
>>The problem is that there appears to not be a way to prevent users from
>>accessing each other's databases and creating new objects in them. As a
>>test, I created userB and userB and then created databaseA and databaseB.
>>I then connected to databasea as usera and created a table with one row of
>>data. I did the same with databaseb and userb.
>>
>>Next, I connected to databasea as userb and created a table. Sure enough,
>>postgres allowed me to create the table in databasea as userb. Only userb
>>could access this table.
>>
>>I wish to prevent such a situation. There doesn't seem to be a way to do
>>so. I can grant and revoke permissions on tables but not on databases as
>>a whole.
>
>
> In 7.3 you can pretty much do what you want. You may want to look into
> upgrading.
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
> (send "unregister YourEmailAddressHere" to majordomo(at)postgresql(dot)org)
>
From | Date | Subject | |
---|---|---|---|
Next Message | Matt Perry | 2003-05-27 03:43:06 | Re: Restricting database access to certain users |
Previous Message | Stephan Szabo | 2003-05-27 02:49:33 | Re: Restricting database access to certain users |