Re: connect permission based on database name

From: Rob Sargent <robjsargent(at)gmail(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "pgsql-generallists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: connect permission based on database name
Date: 2022-05-25 14:27:35
Message-ID: 574d44d9-1900-75e3-7c01-e93c5a92ea0c@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 5/25/22 08:20, Tom Lane wrote:
> Rob Sargent<robjsargent(at)gmail(dot)com> writes:
>> Just wondering if I've bumped into some security issue.
>> I'm somewhat surprised that "grant connect to database <dbname>  to
>> <role>" appears to be stored "by name"?
> I think you are forgetting that databases have a default GRANT CONNECT
> TO PUBLIC. You need to revoke that before other grants/revokes will
> have any functional effect.
>
> regards, tom lane
Yes, of course.  Thanks

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Carsten Klein 2022-05-25 14:30:06 Connect to specific cluster on command line
Previous Message Tom Lane 2022-05-25 14:20:23 Re: connect permission based on database name