Best procedure for restricted access - Mailing list pgsql-admin

From Rainer Leo
Subject Best procedure for restricted access
Date
Msg-id 746856965.20110912151609@workfile.de
Whole thread Raw
Responses Re: Best procedure for restricted access
List pgsql-admin
Hello,

I have been asked to configure a database role
to be used for ODBC access.

So far I have done this:

CREATE ROLE odbc_user LOGIN
  ENCRYPTED PASSWORD 'bar'
  NOSUPERUSER INHERIT NOCREATEDB NOCREATEROLE;

REVOKE ALL ON DATABASE foo FROM odbc_user;
REVOKE CREATE ON SCHEMA public FROM public;
GRANT SELECT ON v_sales TO odbc_user;

When I try:

foo-> SELECT * FROM customers;
access is denied as expected

foo->\d baz
I see table definitions.


How can I restrict the role "odbc_user" to just
"SELECT whatever FROM v_sales;" and nothing else?


Any help would be very appreciated.


Regards,

Rainer Leo

workfile Datenbankservice
Bocksberg 20c
D-22395 Hamburg                                

Fon: 040.60 44 90 41
Fax: 040.34 92 61 08
www.workfile.de


pgsql-admin by date:

Previous
From: Florian Helmberger
Date:
Subject: Re: Encoding Problem
Next
From: Rainer Leo
Date:
Subject: Best procedure for restricted access