From: | Bryan Ward <bward(at)globitech(dot)com> |
---|---|
To: | Ondřej Světlík <osvetlik(at)flexibee(dot)eu>, "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org> |
Subject: | Re: Revoke delete on a table for super user |
Date: | 2016-08-02 20:52:43 |
Message-ID: | 557921E44EEBA849A3D17F95A63D16E2833A2795@GTEX1.globitech.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
I think your best bet is to create a role and assign the permissions that you want to that role/user. I would not change the anything on the superuser.
Regards,
Bryan
-----Original Message-----
From: pgsql-admin-owner(at)postgresql(dot)org [mailto:pgsql-admin-owner(at)postgresql(dot)org] On Behalf Of Ondrej Svetlík
Sent: Tuesday, August 02, 2016 3:28 PM
To: pgsql-admin(at)postgresql(dot)org
Subject: Re: [ADMIN] Revoke delete on a table for super user
Dne 2.8.2016 v 19:27 Tom Lane napsal(a):
> "Campbell, Lance" <lance(at)illinois(dot)edu> writes:
>> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
>
> No. Superusers bypass all access controls, by definition. Your best
> bet is to not do more than you absolutely must as a superuser.
>
> regards, tom lane
>
>
I guess you could achieve this using a trigger.
Regards,
Ondřej
--
Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org) To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
From | Date | Subject | |
---|---|---|---|
Next Message | Ondřej Světlík | 2016-08-02 23:02:08 | Re: Autovacuum of pg_shdepend |
Previous Message | Ondřej Světlík | 2016-08-02 20:27:43 | Re: Revoke delete on a table for super user |