Re: problems with user rights - Mailing list pgsql-admin

From Zouari Fourat
Subject Re: problems with user rights
Date
Msg-id 621eda8a0503300717ca9a63a@mail.gmail.com
Whole thread Raw
In response to Re: problems with user rights  (John DeSoi <desoi@pgedit.com>)
Responses Re: problems with user rights  (John DeSoi <desoi@pgedit.com>)
List pgsql-admin
is it really secure in a shared hosting environnement case ?
do you advise me to offer pgsql in a shared hosting ?


On Wed, 30 Mar 2005 08:04:00 -0500, John DeSoi <desoi@pgedit.com> wrote:
> > i've just added a new user called xxx :
> >
> > create user xxx with password zzz;
> >
> > now am creating it's database :
> >
> > create database db_xxx with owner xxx;
> >
> > it works fine althought when logging with the user xxx i can still
> > view other databases contents  especially pg_catalog schems.
> >
> > is it the right way to add a user ? am i wrong ?
> > i dont want to let my new user view the others databases on the server.
>
> Viewing the information in the system catalogs is open to all users.
> There is not a way to hide it unless you build an interface on top of
> PostgreSQL that limits the queries the user can execute.
>
> John DeSoi, Ph.D.
> http://pgedit.com/
> Power Tools for PostgreSQL
>
>

pgsql-admin by date:

Previous
From: Marco Carvalho
Date:
Subject: multiple servers updating from/to one
Next
From: Chris Browne
Date:
Subject: Re: Many persistant client connections