| From: | Craig Ringer <ringerc(at)ringerc(dot)id(dot)au> |
|---|---|
| To: | Shridhar Daithankar <ghodechhap(at)ghodechhap(dot)net> |
| Cc: | pg-general <pgsql-general(at)postgresql(dot)org> |
| Subject: | Re: How does connect privilege works? |
| Date: | 2012-08-07 08:07:01 |
| Message-ID: | 5020CCA5.4040005@ringerc.id.au |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
On 08/07/2012 11:51 AM, Shridhar Daithankar wrote:
> testdb2=# revoke connect ON database testdb2 FROM testuser1;
>
> REVOKE
You can't revoke a permission that isn't set. PostgreSQL doesn't have
explicit deny rules, so you can only remove a grant.
The documentation on databases doesn't seem to cover that very well,
with no listing of the default permissions.
You probably want to:
REVOKE CONNECT ON DATABASE testdb2 FROM public;
which will leave only superusers and the database owner able to connect
to the DB. You can then:
GRANT CONNECT ON DATABASE testdb2 TO whoever;
--
Craig Ringer
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Craig Ringer | 2012-08-07 08:20:13 | JSON in 9.2: limitations |
| Previous Message | Tom Lane | 2012-08-07 04:21:04 | Re: timestamp with timezone and time zone name |