Re: Preventing database access (including valid users in - Mailing list pgsql-admin

From Robert Treat
Subject Re: Preventing database access (including valid users in
Date
Msg-id 1127833024.19727.222.camel@camel
Whole thread Raw
In response to Preventing database access (including valid users in other databases)  (Allan Kamau <kamauallan@yahoo.com>)
List pgsql-admin
On Mon, 2005-09-26 at 06:09, Allan Kamau wrote:
> Interesting scenario, I have a user who owns database
> objects (tables, sequences) in a database, now I have
> decided not to allow the user by connect to the
> database by excluding the user's username from the
> database – username association in the hba.conf, I
> restarted the server. However the user can still
> connect to the database, and the user can query the
> objects they own but cannot query objects they do not
> own in that database. Is this the expected behaviour

Personally I think you've misconfigured your pg_hba.conf. If you'd like
to send it along with your db version you might be able to get a more
definitive answer.

> and should I explicitly change ownership of the
> objects.
>

Well, it doesn't make much sense to me to have a bunch of objects in a
database owned by someone who will never be allowed to connect to that
database.


Robert Treat
--
Build A Brighter Lamp :: Linux Apache {middleware} PostgreSQL


pgsql-admin by date:

Previous
From: Chris Browne
Date:
Subject: Re: postgresql cluster on SAN
Next
From: Todd Rockhold
Date:
Subject: Configure foreign host for PostgreSQL 8.0.3 on WindowsXP