Restricting database access to certain users

From: Matt Perry <matt(at)primefactor(dot)com>
To: pgsql-admin(at)postgresql(dot)org
Subject: Restricting database access to certain users
Date: 2003-05-27 00:48:57
Message-ID: Pine.LNX.4.44.0305261658350.29902-100000@betty.cometsite.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

I'm looking into migrating several users from MySQL to Postgres and I'm
running into a problem with security. I don't think I understand how
security is handled within postgres. I'm using PostgreSQL v7.1.3 on a Red
Hat 7.2 system.

The problem is that there appears to not be a way to prevent users from
accessing each other's databases and creating new objects in them. As a
test, I created userB and userB and then created databaseA and databaseB.
I then connected to databasea as usera and created a table with one row of
data. I did the same with databaseb and userb.

Next, I connected to databasea as userb and created a table. Sure enough,
postgres allowed me to create the table in databasea as userb. Only userb
could access this table.

I wish to prevent such a situation. There doesn't seem to be a way to do
so. I can grant and revoke permissions on tables but not on databases as
a whole.

--
Matt Perry | matt at primefactor dot com

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Stephan Szabo 2003-05-27 02:49:33 Re: Restricting database access to certain users
Previous Message Mendola Gaetano 2003-05-27 00:19:38 Did I something wrong?