Re: User Permission - Mailing list pgsql-sql

From Richard Broersma Jr
Subject Re: User Permission
Date
Msg-id 20060719151827.19816.qmail@web31811.mail.mud.yahoo.com
Whole thread Raw
In response to Re: User Permission  ("Aaron Bono" <postgresql@aranya.com>)
List pgsql-sql
> > Dear group,
> >    i created a user named 'dataviewer' and grant only select permission to
> > that user,
> >    but now the user could able to create tables. how to restrict this,
> >    i want to give permission to create views and do selects on tables and
> > views.
> >    how to do it?
> >    plz help.
> Have your checked
> http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
> http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html
> I would start by creating a role:
> http://www.postgresql.org/docs/8.1/interactive/user-manag.html
> And revoke all on it.  Then add only the permissions it needs and assign the
> role to the user.

Also, one additional point would be to revoke all from public as mentioned in the following
thread:
http://archives.postgresql.org/pgsql-general/2006-07/msg00148.php

Apparently, whatever privileges 'pubic' has are extended to the privileges of the individual
users.

Regards,

Richard Broersma Jr.


pgsql-sql by date:

Previous
From: Florian Weimer
Date:
Subject: Re: INSERT/UPDATEs cycles and lack of phantom locking
Next
From: "Collin Peters"
Date:
Subject: Multi-table insert using RULE - how to handle id?