Re: FINAL: Multi-User PostgreSQL usage SECURITY

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: FINAL: Multi-User PostgreSQL usage SECURITY
Дата
Msg-id 11012.999903946@sss.pgh.pa.us
обсуждение исходный текст
Ответ на FINAL: Multi-User PostgreSQL usage SECURITY  ("Mike Rogers" <temp6453@hotmail.com>)
Список pgsql-admin
"Mike Rogers" <temp6453@hotmail.com> writes:
>     I have tried chaning pg_hba.conf to add the database field to the user,
> but that doesn't seem to help at all.

Make the database field "sameuser", and then the line only allows
connection to one's own database.  You will need an escape hatch to
allow you as superuser to get into everyone's db (else you can't run
pg_dumpall).  The escape hatch should be a second line in pg_hba.conf
with a tighter authorization method (eg, a secondary password file
with an entry only for you).

            regards, tom lane

В списке pgsql-admin по дате отправления:

Предыдущее
От: "Mike Rogers"
Дата:
Сообщение: FINAL: Multi-User PostgreSQL usage SECURITY
Следующее
От: Stephan Szabo
Дата:
Сообщение: Re: FINAL: Multi-User PostgreSQL usage SECURITY