Preventing database access (including valid users in other databases) - Mailing list pgsql-admin

From Allan Kamau
Subject Preventing database access (including valid users in other databases)
Date
Msg-id 20050926100933.95050.qmail@web53507.mail.yahoo.com
Whole thread Raw
Responses Re: Preventing database access (including valid users in
List pgsql-admin
I would like to prevent users including users who may
be valid in other databases from accessing a
particular database, I have excluded database –
username associations of their usernames with the
database in the hba.conf file, but I observed that
they can still connect to the database, query metadata
(by use of \d) but cannot perform queries. Is there a
way to fully prevent database connect and query of
metadata?

Interesting scenario, I have a user who owns database
objects (tables, sequences) in a database, now I have
decided not to allow the user by connect to the
database by excluding the user's username from the
database – username association in the hba.conf, I
restarted the server. However the user can still
connect to the database, and the user can query the
objects they own but cannot query objects they do not
own in that database. Is this the expected behaviour
and should I explicitly change ownership of the
objects.

Allan.




__________________________________
Yahoo! Mail - PC Magazine Editors' Choice 2005
http://mail.yahoo.com

pgsql-admin by date:

Previous
From: Chris Browne
Date:
Subject: Re: Performance question: Restore + INDEX
Next
From: Gourish Singbal
Date:
Subject: Re: vacuum message