Re: TODO item: set proper permissions on non-system schemas

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: TODO item: set proper permissions on non-system schemas
Дата
Msg-id 3201.1125594811@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: TODO item: set proper permissions on non-system schemas  (Andrew Dunstan <andrew@dunslane.net>)
Список pgsql-hackers
Andrew Dunstan <andrew@dunslane.net> writes:
> Tom Lane wrote:
>> Change the ownership of public in template1 to be a "dbadmin" group.
>> Grant membership in "dbadmin" to all the DB owners.  End of problem.

> Won't that suddenly grant the owner of foo_db  dbadmin rights in bar_db? 
> That seems to violate the principle of least surprise.

I'm assuming here that the various dbowners aren't even allowed to
connect to each others' databases.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Josh Berkus
Дата:
Сообщение: Re: Remove xmin and cmin from frozen tuples
Следующее
От: Steve Atkins
Дата:
Сообщение: Re: Call for 7.5 feature completion