Re: Permission on tables - Mailing list pgsql-admin

From Nick Fankhauser
Subject Re: Permission on tables
Date
Msg-id NEBBLAAHGLEEPCGOBHDGGELIENAA.nickf@ontko.com
Whole thread Raw
In response to Permission on tables  ("Steven Cuthbertson" <steven@tie.cl>)
Responses Re: Permission on tables  ("Steven Cuthbertson" <steven@tie.cl>)
List pgsql-admin
>      grant ALL on mytable to PUBLIC;
>
> Q: Is this dangerous? What is encompassed by "ALL"? Read? Write?

Sounds unwise to me, but I'm not a PHP-er.

In the Tomcat/Apache world, I can tell you that we generally grant select on
mytable to "www-data".
"www-data is the user that Apache runs as by default. I'd suggest finding
the Apache or PHP user & then granting only those privileges needed to only
that user.

Are you sure that you aren't just getting a more general rejection of your
connection due to problem in pg_hba? You mention that the servers are
separated. You could test the connectivity & authorization from X to Y by
trying (from X) psql -hY

regards,

-Nick

---------------------------------------------------------------------
Nick Fankhauser

    nickf@doxpop.com  Phone 1.765.965.7363  Fax 1.765.962.9788
doxpop - Court records at your fingertips - http://www.doxpop.com/


pgsql-admin by date:

Previous
From: "Steven Cuthbertson"
Date:
Subject: Permission on tables
Next
From: "Steven Cuthbertson"
Date:
Subject: Re: Permission on tables