diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml index e784268512..2ca49d2482 100644 --- a/doc/src/sgml/runtime.sgml +++ b/doc/src/sgml/runtime.sgml @@ -135,14 +135,23 @@ postgres$ initdb -D /usr/local/pgsql/data Because the data directory contains all the data stored in the database, it is essential that it be secured from unauthorized - access. initdb therefore revokes access - permissions from everyone but the + access. On all operating systems other than Windows, + initdb revokes access permissions from everyone but the PostgreSQL user, and optionally, group. Group access, when enabled, is read-only. This allows an unprivileged user in the same group as the cluster owner to take a backup of the cluster data or perform other operations that only require read access. + + + If you are running PostgreSQL on Windows and create your cluster using + initdb, you will need to set the permissions on the data + directory manually. You should revoke all user access to the data directory + except for the PostgreSQL user. + + + Note that enabling or disabling group access on an existing cluster requires the cluster to be shut down and the appropriate mode to be set on all