Yeah, I did limit access to a single database. All this hassle is to
support our testing efforts. The deployed database runs in a very
restricted environment.
Thanks for the help.
Stephan Szabo wrote:
>On Wed, 18 Jun 2003, Travis Hume wrote:
>
>
>
>>So I ended up doing this:
>>
>> create user ruser createuser;
>>
>>and then limiting where he can connect from through pg_hba.conf file.
>>
>>
>
>I think createuser implies superuser access. If you do that, you're
>probably also going to want to control what databases he can connect to
>not just from where (if you haven't already). And, you need to be
>careful with untrusted pl languages, but it might be easiest to just not
>build any.
>
>
>