From: | Matt Perry <matt(at)primefactor(dot)com> |
---|---|
To: | pgsql-admin(at)postgresql(dot)org |
Subject: | Restricting database access to certain users |
Date: | 2003-05-27 00:48:57 |
Message-ID: | Pine.LNX.4.44.0305261658350.29902-100000@betty.cometsite.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-admin |
I'm looking into migrating several users from MySQL to Postgres and I'm
running into a problem with security. I don't think I understand how
security is handled within postgres. I'm using PostgreSQL v7.1.3 on a Red
Hat 7.2 system.
The problem is that there appears to not be a way to prevent users from
accessing each other's databases and creating new objects in them. As a
test, I created userB and userB and then created databaseA and databaseB.
I then connected to databasea as usera and created a table with one row of
data. I did the same with databaseb and userb.
Next, I connected to databasea as userb and created a table. Sure enough,
postgres allowed me to create the table in databasea as userb. Only userb
could access this table.
I wish to prevent such a situation. There doesn't seem to be a way to do
so. I can grant and revoke permissions on tables but not on databases as
a whole.
--
Matt Perry | matt at primefactor dot com
From | Date | Subject | |
---|---|---|---|
Next Message | Stephan Szabo | 2003-05-27 02:49:33 | Re: Restricting database access to certain users |
Previous Message | Mendola Gaetano | 2003-05-27 00:19:38 | Did I something wrong? |