Re: about privileges on pg_stat_activity columns - Mailing list pgsql-general

From Richard Huxton
Subject Re: about privileges on pg_stat_activity columns
Date
Msg-id 49379CAA.9080600@archonet.com
Whole thread Raw
In response to about privileges on pg_stat_activity columns  ("Jaime Casanova" <jcasanov@systemguards.com.ec>)
Responses Re: about privileges on pg_stat_activity columns  ("Jaime Casanova" <jcasanov@systemguards.com.ec>)
List pgsql-general
Jaime Casanova wrote:
> Hi,
>
> there is an auditor that want to monitor our database activity to see
> the session and the ip they come from, if they are waiting and so
> on... pg_stat_activity and pg_locks views come to my mind...
>
> we created an user to him and give him privileges to pg_locks and
> pg_stat_activity (and the functions pg_stat_activity is calling) but
> still he see the columns that comes from the functions as null... is
> there a way to give him access to that data without give him
> superuser?

I'd create a view or some functions with "security definer" privileges.
That way you can provide precisely the access needed.

--
  Richard Huxton
  Archonet Ltd

pgsql-general by date:

Previous
From: Richard Huxton
Date:
Subject: Re: Linked server query problem
Next
From: Wajid Khattak
Date:
Subject: Re: Executing a user created function twice give an error