Re: can't "grant all on database..." - Mailing list pgsql-general

From Stephan Szabo
Subject Re: can't "grant all on database..."
Date
Msg-id 20030618150343.X40850-100000@megazone23.bigpanda.com
Whole thread Raw
In response to Re: can't "grant all on database..."  (Travis Hume <travis.hume@tenzing.com>)
Responses Re: can't "grant all on database..."  (Travis Hume <travis.hume@tenzing.com>)
List pgsql-general
On Wed, 18 Jun 2003, Travis Hume wrote:

> So I ended up doing this:
>
>     create user ruser createuser;
>
> and then limiting where he can connect from through pg_hba.conf file.

I think createuser implies superuser access. If you do that, you're
probably also going to want to control what databases he can connect to
not just from where (if you haven't already).  And, you need to be
careful with untrusted pl languages, but it might be easiest to just not
build any.


pgsql-general by date:

Previous
From: Travis Hume
Date:
Subject: Re: can't "grant all on database..."
Next
From: Travis Hume
Date:
Subject: Re: can't "grant all on database..."