Re: Restrict allowed database names? - Mailing list pgsql-general

From Sergey Konoplev
Subject Re: Restrict allowed database names?
Date
Msg-id c3a7de1f1003210726h38370131jf83471014ee95ec9@mail.gmail.com
Whole thread Raw
In response to Restrict allowed database names?  (Adam Seering <aseering@MIT.EDU>)
Responses Re: Restrict allowed database names?
List pgsql-general
On 21 March 2010 00:24, Adam Seering <aseering@mit.edu> wrote:
> Hi,
>        I'm trying to set up an internal general-purpose PostgreSQL server installation.  I want most users with login
accessto the server to be able to create databases, but only with names that follow a specified naming convention (in
particular,approximately "is prefixed with the owner's username").  A subset of administrative users can create users
withany name.  The goal is to let users create arbitrary databases, but to force them to get approval for names that
someoneelse (or some other service) might conceivably want. 
>
>        Is there any way to enforce this within PostgreSQL?  Maybe something like a trigger on CREATE DATABASE, if
that'spossible? 
>

What about PL/pgSQL wrapper function for CREATE DATABASE with database
name check and SECURITY DEFINER option. And of course you should not
set CREATEDB option to regular users.

--
Regards,
Sergey Konoplev

pgsql-general by date:

Previous
From: Scott Marlowe
Date:
Subject: Re: stopping processes, preventing connections
Next
From: "Daniel Verite"
Date:
Subject: Re: Restrict allowed database names?