Re: Any way to have CREATEUSER privs without having all privs?

Поиск
Список
Период
Сортировка
От Bruno Wolff III
Тема Re: Any way to have CREATEUSER privs without having all privs?
Дата
Msg-id 20040107151911.GA6088@wolff.to
обсуждение исходный текст
Ответ на Re: Any way to have CREATEUSER privs without having all privs?  (Bruno Wolff III <bruno@wolff.to>)
Список pgsql-general
On Sat, Dec 06, 2003 at 22:33:00 -0800,
  Ezra Epstein <sf-lists@prajnait.com> wrote:
> Thank you Bruno for the informative reply.
>
> I'm not sure how ident solves this.  I would like the session to run as the
> actual user (via set session authorization) so that that user's actual privs
> are enforced.  But I want the connection to be shared: so it cannot be per
> login (username/pw combo).  I'm not up on ident enough to see the fit.  Any
> pointers would be most welcome.

I was wrong about this being useful in your situation. SET SESSION
AUTHORIZATION doesn't reauthenticate, it only allows you to switch
to a new user if you originally were connected as a superuser.

Ident authentication would only be useful if you could close and then
reopen the connection. This could be useful if the overhead of doing
this wasn't a concern.

В списке pgsql-general по дате отправления:

Предыдущее
От: Tim McAuley
Дата:
Сообщение: deadlocks - sharelocks on transactions
Следующее
От: Bruno Wolff III
Дата:
Сообщение: Re: problems with transaction blocks