Re: FINAL: Multi-User PostgreSQL usage SECURITY - Mailing list pgsql-admin

From Tom Lane
Subject Re: FINAL: Multi-User PostgreSQL usage SECURITY
Date
Msg-id 11012.999903946@sss.pgh.pa.us
Whole thread Raw
In response to FINAL: Multi-User PostgreSQL usage SECURITY  ("Mike Rogers" <temp6453@hotmail.com>)
List pgsql-admin
"Mike Rogers" <temp6453@hotmail.com> writes:
>     I have tried chaning pg_hba.conf to add the database field to the user,
> but that doesn't seem to help at all.

Make the database field "sameuser", and then the line only allows
connection to one's own database.  You will need an escape hatch to
allow you as superuser to get into everyone's db (else you can't run
pg_dumpall).  The escape hatch should be a second line in pg_hba.conf
with a tighter authorization method (eg, a secondary password file
with an entry only for you).

            regards, tom lane

pgsql-admin by date:

Previous
From: "Mike Rogers"
Date:
Subject: FINAL: Multi-User PostgreSQL usage SECURITY
Next
From: Stephan Szabo
Date:
Subject: Re: FINAL: Multi-User PostgreSQL usage SECURITY