| From: | Bryan Ward <bward(at)globitech(dot)com> |
|---|---|
| To: | Ondřej Světlík <osvetlik(at)flexibee(dot)eu>, "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org> |
| Subject: | Re: Revoke delete on a table for super user |
| Date: | 2016-08-02 20:52:43 |
| Message-ID: | 557921E44EEBA849A3D17F95A63D16E2833A2795@GTEX1.globitech.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-admin |
I think your best bet is to create a role and assign the permissions that you want to that role/user. I would not change the anything on the superuser.
Regards,
Bryan
-----Original Message-----
From: pgsql-admin-owner(at)postgresql(dot)org [mailto:pgsql-admin-owner(at)postgresql(dot)org] On Behalf Of Ondrej Svetlík
Sent: Tuesday, August 02, 2016 3:28 PM
To: pgsql-admin(at)postgresql(dot)org
Subject: Re: [ADMIN] Revoke delete on a table for super user
Dne 2.8.2016 v 19:27 Tom Lane napsal(a):
> "Campbell, Lance" <lance(at)illinois(dot)edu> writes:
>> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
>
> No. Superusers bypass all access controls, by definition. Your best
> bet is to not do more than you absolutely must as a superuser.
>
> regards, tom lane
>
>
I guess you could achieve this using a trigger.
Regards,
Ondřej
--
Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org) To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Ondřej Světlík | 2016-08-02 23:02:08 | Re: Autovacuum of pg_shdepend |
| Previous Message | Ondřej Světlík | 2016-08-02 20:27:43 | Re: Revoke delete on a table for super user |