Re: SECURITY - Mailing list pgsql-admin

From Bruno Wolff III
Subject Re: SECURITY
Date
Msg-id 20030522123105.GB20191@wolff.to
Whole thread Raw
In response to SECURITY  (ivan <ivan@psycho.pl>)
List pgsql-admin
On Wed, May 21, 2003 at 20:18:03 +0200,
  ivan <ivan@psycho.pl> wrote:
>
>
> why when i create user and create database for this user, he can connect
> to my others database , (not only his own) and create there tables and
> etc.
> He can not select , delete etc but he can create something and then drop
> this , is can be like a bug ?

In 7.2 and higher you can control this (being able to connect to a database)
in pg_hba.conf by setting up per user per database rules for authentication
methods.

As an alternative in 7.3 and higher you can control being able to create
objects in a database. To prevent creation of schemas and temporary tables
issue:
REVOKE ALL ON DATABASE database_name FROM PUBLIC;

The PUBLIC schema allows object creation by default. To prevent people
from creating objects there issue:
REVOKE CREATE ON SCHEMA PUBLIC FROM PUBLIC;

pgsql-admin by date:

Previous
From: "Eugene M. Zheganin"
Date:
Subject: Re: Full vacuuming of BIG tables takes too long
Next
From: Ernest E Vogelsinger
Date:
Subject: Q: Structured index - which one runs faster?