Thread: User Permission

User Permission

From
"sathish kumar shanmugavelu"
Date:
Dear group,<br />   i created a user named 'dataviewer' and grant only select permission to that user,<br />   but now
theuser could able to create tables. how to restrict this,<br />   i want to give permission to create views and do
selectson tables and views. <br />   how to do it?<br />   plz help.<br clear="all" /><br />-- <br />Sathish Kumar.S<br
/>SpireTEK 

Re: User Permission

From
"Aaron Bono"
Date:
On 7/19/06, sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com> wrote:
Dear group,
   i created a user named 'dataviewer' and grant only select permission to that user,
   but now the user could able to create tables. how to restrict this,
   i want to give permission to create views and do selects on tables and views.
   how to do it?
   plz help.

 
Have your checked
http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html

I would start by creating a role:
http://www.postgresql.org/docs/8.1/interactive/user-manag.html

And revoke all on it.  Then add only the permissions it needs and assign the role to the user.

==================================================================
   Aaron Bono
   Aranya Software Technologies, Inc.
   http://www.aranya.com
==================================================================

Re: User Permission

From
Richard Broersma Jr
Date:
> > Dear group,
> >    i created a user named 'dataviewer' and grant only select permission to
> > that user,
> >    but now the user could able to create tables. how to restrict this,
> >    i want to give permission to create views and do selects on tables and
> > views.
> >    how to do it?
> >    plz help.
> Have your checked
> http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
> http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html
> I would start by creating a role:
> http://www.postgresql.org/docs/8.1/interactive/user-manag.html
> And revoke all on it.  Then add only the permissions it needs and assign the
> role to the user.

Also, one additional point would be to revoke all from public as mentioned in the following
thread:
http://archives.postgresql.org/pgsql-general/2006-07/msg00148.php

Apparently, whatever privileges 'pubic' has are extended to the privileges of the individual
users.

Regards,

Richard Broersma Jr.