Thread: Hiding users and databases

Hi all,

We run database servers that each contain multiple customer databases.
We would like to give customers access to their own database but even
though they are unable to connect to the databases of other customers
due to connect grants they are still able to see all other databases
and users on the server.

Is there a way to mask or hide databases which they don’t have connect
grants to and hide users/roles aside from their own? I have found some
methods involving modifying the system catalogs but would prefer not
to do this. I would like to avoid renaming all users/databases to
non-identifiable names if possible but so far I think this is my only
option. Any other suggestions would be appreciated.

Thanks,
Ross

On Fri, Oct 17, 2014 at 01:48:25PM +1100, Ross Dougherty wrote:
> Hi all,
>
> We run database servers that each contain multiple customer databases.
> We would like to give customers access to their own database but even
> though they are unable to connect to the databases of other customers
> due to connect grants they are still able to see all other databases
> and users on the server.
>
> Is there a way to mask or hide databases which they don’t have connect
> grants to and hide users/roles aside from their own? I have found some
> methods involving modifying the system catalogs but would prefer not
> to do this. I would like to avoid renaming all users/databases to
> non-identifiable names if possible but so far I think this is my only
> option. Any other suggestions would be appreciated.

I know of now way to do this except use random strings for usernames and
database names.

--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + Everyone has their own god. +

Ross Dougherty <ross@dougherty.id.au> wrote:

> Hi all,
>
> We run database servers that each contain multiple customer databases.
> We would like to give customers access to their own database but even
> though they are unable to connect to the databases of other customers
> due to connect grants they are still able to see all other databases
> and users on the server.
>
> Is there a way to mask or hide databases which they don’t have connect
> grants to and hide users/roles aside from their own? I have found some

I'm working for a hosting privider, and we are using this:

http://wiki.postgresql.org/wiki/Shared_Database_Hosting

(yeah, he is a colleague ...)



Andreas
--
Really, I'm not out to destroy Microsoft. That will just be a completely
unintentional side effect.                              (Linus Torvalds)
"If I was god, I would recompile penguin with --enable-fly."   (unknown)
Kaufbach, Saxony, Germany, Europe.              N 51.05082°, E 13.56889°