Re: Password sub-process ... - Mailing list pgsql-hackers

From Jan Wieck
Subject Re: Password sub-process ...
Date
Msg-id 3D415692.AF19CA0@Yahoo.com
Whole thread Raw
In response to Password sub-process ...  ("Marc G. Fournier" <scrappy@hub.org>)
Responses Re: Password sub-process ...  ("Roderick A. Anderson" <raanders@acm.org>)
many idle processes  ("John Liu" <johnl@synthesys.com>)
List pgsql-hackers
"Marc G. Fournier" wrote:
> 
> Something to maybe add to the TODO list, if someone has the
> time/inclination to work on it ...
> 
> The problem with the current auth system, as I see it, is that you can't
> easily have seperate user lists and passwords per database ... its shared
> across the system ...

I don't see a problem with that in general. Other databases (like
Informix) do it even worse and you need a UNIX or NIS account where the
password is held!

What would be good is IMHO to have GRANT|REVOKE CONNECT which defaults
to REVOKE, so only superusers and the DB owner can connect, but that the
owner later can change it without the need to edit hba.conf.


Jan

-- 

#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me.                                  #
#================================================== JanWieck@Yahoo.com #


pgsql-hackers by date:

Previous
From: "Marc G. Fournier"
Date:
Subject: Password sub-process ...
Next
From: Jan Wieck
Date:
Subject: Going on vacation