Re: Revoke delete on a table for super user

From: Bryan Ward <bward(at)globitech(dot)com>
To: Ondřej Světlík <osvetlik(at)flexibee(dot)eu>, "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org>
Subject: Re: Revoke delete on a table for super user
Date: 2016-08-02 20:52:43
Message-ID: 557921E44EEBA849A3D17F95A63D16E2833A2795@GTEX1.globitech.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

I think your best bet is to create a role and assign the permissions that you want to that role/user. I would not change the anything on the superuser.

Regards,
Bryan

-----Original Message-----
From: pgsql-admin-owner(at)postgresql(dot)org [mailto:pgsql-admin-owner(at)postgresql(dot)org] On Behalf Of Ondrej Svetlík
Sent: Tuesday, August 02, 2016 3:28 PM
To: pgsql-admin(at)postgresql(dot)org
Subject: Re: [ADMIN] Revoke delete on a table for super user

Dne 2.8.2016 v 19:27 Tom Lane napsal(a):
> "Campbell, Lance" <lance(at)illinois(dot)edu> writes:
>> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
>
> No. Superusers bypass all access controls, by definition. Your best
> bet is to not do more than you absolutely must as a superuser.
>
> regards, tom lane
>
>

I guess you could achieve this using a trigger.

Regards,

Ondřej

--
Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org) To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Ondřej Světlík 2016-08-02 23:02:08 Re: Autovacuum of pg_shdepend
Previous Message Ondřej Světlík 2016-08-02 20:27:43 Re: Revoke delete on a table for super user