Re: ALTER DATABASE and datallowconn - Mailing list pgsql-hackers

From Tom Lane
Subject Re: ALTER DATABASE and datallowconn
Date
Msg-id 22703.1336055194@sss.pgh.pa.us
Whole thread Raw
In response to Re: ALTER DATABASE and datallowconn  (Magnus Hagander <magnus@hagander.net>)
Responses Re: ALTER DATABASE and datallowconn
List pgsql-hackers
Magnus Hagander <magnus@hagander.net> writes:
> On Thu, May 3, 2012 at 4:13 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> Magnus Hagander <magnus@hagander.net> writes:
>>> Is there a particular reason we don't have an ALTER DATABASE switch
>>> that controls the datallowconn, or is it just something "missed out"?

>> It was never intended to be a user-accessible switch, just something to
>> protect template0.

> It can be rather useful for others as well, though - since it works as
> a defense against superusers doing the wrong thing..

I'm having a hard time seeing the use-case for a user-created database
that nobody at all can connect to.  Even if there is some marginal use
for that, you could achieve the result with a special entry in
pg_hba.conf to "reject" all connection attempts for that DB.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Magnus Hagander
Date:
Subject: Re: ALTER DATABASE and datallowconn
Next
From: Magnus Hagander
Date:
Subject: Re: ALTER DATABASE and datallowconn