privilege shedding

From: dkeeney <dvkeeney(at)gmail(dot)com>
To: pgsql-admin(at)postgresql(dot)org
Subject: privilege shedding
Date: 2008-08-21 12:35:26
Message-ID: b6680ffd-0b5e-456d-9f8a-164acdc5260c@m44g2000hsc.googlegroups.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin


Is there a way to non-reversibly shed privilige within a PostgreSQL
session?

I would like to start a session as a superuser role, set up some views
and triggers as superuser, and then change role to a lesser role for
the remainder of the session.

It seems that if you use 'set role' for this, you get the lesser role,
but the original (superuser) role can be restored by another 'set
role' statement, without any re-authentication. I would like the role
change to persist through the life of the session, without the option
of restoring the superuser role.

Thank you,
David

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message slamp slamp 2008-08-21 13:25:07 Re: pg_log directory
Previous Message Albe Laurenz 2008-08-21 12:03:44 Re: [GENERAL] Regarding access to a user