Re: user manage their own pg_hba entries - Mailing list pgsql-novice

From Glenn Davy
Subject Re: user manage their own pg_hba entries
Date
Msg-id 1153871327.13887.40.camel@localhost.localdomain
Whole thread Raw
In response to Re: user manage their own pg_hba entries  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: user manage their own pg_hba entries
List pgsql-novice
Delightful - thanks for the news. in mean times seans comments will get
me out of trouble, so thanks again sean
glenn
On Tue, 2006-07-25 at 11:41 -0400, Tom Lane wrote:
> Sean Davis <sdavis2@mail.nih.gov> writes:
> > If this is the way you are going to set things up, then I would just set up
> > all the users to connect to all databases.  Then, users can set permissions
> > for their databases to limit privileges.
>
> This will work a lot better as of 8.2; we've added a CONNECT privilege
> for databases that can be manipulated with ordinary GRANT/REVOKE commands.
> Unfortunately that's not in any released version :-(
>
> For the moment, the easiest way to handle it is via groups.  The trick
> is to create a group associated with each database (and named the same
> as the database), then use the "samegroup" option in pg_hba.conf to show
> that people can log into databases if they are members of the
> corresponding group.  Then granting and revoking group membership gets
> the job done without any changes in pg_hba.conf.
>
>             regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 4: Have you searched our list archives?
>
>                http://archives.postgresql.org

pgsql-novice by date:

Previous
From: Sean Davis
Date:
Subject: Re: user manage their own pg_hba entries
Next
From: Sean Davis
Date:
Subject: Re: user manage their own pg_hba entries