Re: system variable can be edited by all user? - Mailing list pgsql-general

From Adrian Klaver
Subject Re: system variable can be edited by all user?
Date
Msg-id de06aaf0-6319-2c04-2cff-6232c041f0ad@aklaver.com
Whole thread Raw
In response to system variable can be edited by all user?  (chris navarroza <canavarroza.work@gmail.com>)
List pgsql-general
On 11/21/22 22:25, chris navarroza wrote:
> Hi,
> 
> Ive created a read only user (SELECT PRIVILEGE) but it turns out that 
> this user can do this queries: SHOW work_mem; SET work_mem='40MB'; How 
> do I limit him?

Short answer is what Laurenz Albe posted.

Long answer is:

From:

https://www.postgresql.org/docs/current/view-pg-settings.html

select name, setting, context from pg_settings where name = 'work_mem';
    name   | setting | context
----------+---------+---------
  work_mem | 4096    | user

user

     These settings can be set from postgresql.conf, or within a session 
via the SET command. Any user is allowed to change their session-local 
value. Changes in postgresql.conf will affect existing sessions only if 
no session-local value has been established with SET.


See page for the other possible values for context and what they mean 
with regard to privileges.

>
> Thanks,
> 
> Butching
> 

-- 
Adrian Klaver
adrian.klaver@aklaver.com




pgsql-general by date:

Previous
From: "pbj@cmicdo.com"
Date:
Subject: Re: copying json data and backslashes
Next
From: Alastair McKinley
Date:
Subject: Re: copying json data and backslashes