Re: Unable to revoke insert privileges on a table

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: "Burgess, Freddie" <FBurgess(at)radiantblue(dot)com>
Cc: "pgsql-bugs(at)postgresql(dot)org" <pgsql-bugs(at)postgresql(dot)org>
Subject: Re: Unable to revoke insert privileges on a table
Date: 2014-06-11 16:11:07
Message-ID: CABUevEyrjZ50fvuJPd0Zd10AKcuxpYOmv-gP6h0aYL9LsSrwBg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On Wed, Jun 11, 2014 at 6:03 PM, Burgess, Freddie <FBurgess(at)radiantblue(dot)com>
wrote:

> Can I define this "separate user" with superuser rights, and modify our
> clients connection to this user instead of the postgres user? Are there
> implications with pgpool or our standby server running streaming
> replication?
>

No, as long as the user has superuser rights, it will bypass all
permissions checks in the whole system. If you want to be able to reduce
permissions, you need to use a user that's not a superuser.

There should be no implications on replication at all.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message ron 2014-06-11 18:32:51 BUG #10622: PLPerl extenstion install failure - why is it asking ActivePerl?
Previous Message Burgess, Freddie 2014-06-11 16:03:00 Re: Unable to revoke insert privileges on a table