Re: Role Authority when running pgadmin3 - Mailing list pgadmin-support

From Guillaume Lelarge
Subject Re: Role Authority when running pgadmin3
Date
Msg-id 1326061357.2329.11.camel@localhost.localdomain
Whole thread Raw
In response to Role Authority when running pgadmin3  ("Jerrold \"Eric\" Thompson" <jet@whidbey.com>)
List pgadmin-support
On Sun, 2012-01-08 at 12:37 -0800, Jerrold "Eric" Thompson wrote:
> I am new to pgadmin3 and PostgreSQL.
> 
> I have set the system user 'jet' to be a superuser.
> 
> I have a database user 'videoworks', and a database videoworks.
> 
> When I start pgadmin3 from bash and logged in as 'jet', most of
> the configuration tools are available to me on the videoworks
> database, except Tools => Server Configuration.
> 
> At this point:
>      Login
>      Createdb
>      Inherits
> ...are set to yes
> 
>      Superuser
>      Create Roles
>      Update catalogs
> 
> are set to no
> 
>   ...........for user videoworks
> 
> User 'jet' is set to yes for everything.
> 
> If I set the database user 'videoworks' as a superuser,
> then restart the server, and restart pgadmin3 I am able to
> use Tool => System Configuration
> 

You don't need to restart the server for this.

> My question is: I thought it was a bad Idea to grant Superuser status to all
> roles, but without doing so how am I able to use the
> 
>      TOOL => System Configuration
> 
> when I start pgadmin3 and I am logged in to the shell as 'jet'?
> 

It's actually a bad idea to grant superuser attribute to all roles. But
giving all your users the right to change the system configuration, and
restart the server is also a bad idea.

Anyway, we cannot allow everyone to change configuration as they see
fit, and restart the server, and whatnot. And, to be honest, pgAdmin is
pretty hard to use at its fullest without superuser attribute.


-- 
Guillaume
http://blog.guillaume.lelarge.info
http://www.dalibo.com
PostgreSQL Sessions #3: http://www.postgresql-sessions.org



pgadmin-support by date:

Previous
From: Cristian Hernández
Date:
Subject: Consulta
Next
From: Filip Rembiałkowski
Date:
Subject: Re: Consulta