Re: zero knowledge users - Mailing list pgsql-hackers

From Andrew Dunstan
Subject Re: zero knowledge users
Date
Msg-id 4072D1D6.40000@dunslane.net
Whole thread Raw
In response to Re: zero knowledge users  (Rod Taylor <pg@rbt.ca>)
List pgsql-hackers
Rod Taylor wrote:

>On Tue, 2004-04-06 at 10:23, Andrew Dunstan wrote:
>  
>
>>I have been doing some experimentation for a series of articles I am 
>>writing, and want to create a user with as little privilege as possible 
>>who can still do the things I explicitly want him/her to be able to do.
>>
>>In particular, I wanted to be able to deny any useful access to the 
>>metadata contained in catalogs and the information schema.
>>    
>>
>
>Out of curiosity, why would you deny them access to the information schema?
>
>  
>

It might be overkill. Basically I was operating on the principle of 
"everything not explicitly allowed is forbidden". I will experiment some 
more.

cheers

andrew


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Function to kill backend
Next
From: Tom Lane
Date:
Subject: Re: Function to kill backend