Re: Revoke "drop database" even for superusers?

Поиск
Список
Период
Сортировка
От Albe Laurenz
Тема Re: Revoke "drop database" even for superusers?
Дата
Msg-id D960CB61B694CF459DCFB4B0128514C208AF01A7@exadv11.host.magwien.gv.at
обсуждение исходный текст
Ответ на Revoke "drop database" even for superusers?  (Edson Richter <richter@simkorp.com.br>)
Ответы Re: Revoke "drop database" even for superusers?  (Edson Richter <richter@simkorp.com.br>)
Re: Revoke "drop database" even for superusers?  (Andres Freund <andres@anarazel.de>)
Список pgsql-general
Edson Richter wrote:
> I've a bunch of databases that cannot be dropped in any case.
>
> I was wondering if it is possible to revoke "drop database" permission
for all users, in order that
> even superuser, if he wishes to drop a database, he will need first to
"grant drop database" first.
>
> I know there is already a safety that does not allow dropping
databases in use - I just want to make
> even harder.

You cannot play it over permissions, but what about the following trick:

postgres=# CREATE DATABASE persist;
CREATE DATABASE
postgres=# UPDATE pg_database SET datistemplate=TRUE WHERE
datname='persist';
UPDATE 1
postgres=# DROP DATABASE persist;
ERROR:  cannot drop a template database

Yours,
Laurenz Albe


В списке pgsql-general по дате отправления:

Предыдущее
От: Edson Richter
Дата:
Сообщение: Revoke "drop database" even for superusers?
Следующее
От: "Albe Laurenz"
Дата:
Сообщение: Re: explain plan visibility