Обсуждение: Re: Re: grant privileges to a database [URGENT]

Поиск
Список
Период
Сортировка

Re: Re: grant privileges to a database [URGENT]

От
"Mike Miller"
Дата:
MySQL has this feature.  I run a multi-user system and require shared MySQL
And PostgreSQL dbs.  I have mysql fine.  Users have their DBs and can only
access their DBs... but theres no real way to do this in Postgres.  I can
restrict tables, but I can still create tables in other poeples DBs.  Maybe
only allowed to acess DBs you create or are assigned permission to

--
Mike



>From: "Martin A. Marques" <martin@math.unl.edu.ar>
>To: Michael Fork <mfork@toledolink.com>
>CC: pgsql-hackers@postgresql.org, pgsql-general@postgresql.org
>Subject: Re: Re: grant privileges to a database
>Date: Wed, 31 Jan 2001 16:41:59 -0300
>
>El Mi� 31 Ene 2001 15:53, Michael Fork escribi�:
> > This is the closest thing to what you want:
> >
> > GRANT ALL ON table TO user;
> >
> > (see http://www.postgresql.org/users-lounge/docs/7.0/user/sql-grant.htm)
>
>Yes, I'm aware of that. That's why I'm asking for an opinion of the
>developers on this issue.
>I think it would be a nice feature, so that the postgres user creates the
>database and gives all kind of permissions on that database to another
>user,
>which doesn't have to be able to create databases.
>
>Any comments?
>
>--
>System Administration: It's a dirty job,
>but someone told I had to do it.
>-----------------------------------------------------------------
>Mart�n Marqu�s            email:     martin@math.unl.edu.ar
>Santa Fe - Argentina        http://math.unl.edu.ar/~martin/
>Administrador de sistemas en math.unl.edu.ar
>-----------------------------------------------------------------

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.


Re: Re: grant privileges to a database [URGENT]

От
"Martin A. Marques"
Дата:
El Mié 31 Ene 2001 21:32, Mike Miller escribió:
> MySQL has this feature.  I run a multi-user system and require shared MySQL
> And PostgreSQL dbs.  I have mysql fine.  Users have their DBs and can only
> access their DBs... but theres no real way to do this in Postgres.  I can
> restrict tables, but I can still create tables in other poeples DBs.  Maybe
> only allowed to acess DBs you create or are assigned permission to

This is what I'm talking about (sort of) and I find it a handy thing that
informix has since at least 1995.
Lets say I have a database server and I create databases for diferent groups
of people to populate. Thtas what grant dba would be usefull for.

Saludos... :-)

--
System Administration: It's a dirty job,
but someone told I had to do it.
-----------------------------------------------------------------
Martín Marqués            email:     martin@math.unl.edu.ar
Santa Fe - Argentina        http://math.unl.edu.ar/~martin/
Administrador de sistemas en math.unl.edu.ar
-----------------------------------------------------------------

Re: [HACKERS] Re: Re: grant privileges to a database [URGENT]

От
Kovacs Baldvin
Дата:
Hello

A few weeks ago I was interested in this question. My results were:
- Yes, this is a sorrowful but true fact that if you enable access to
  someone to a database, she is automatically enabled to create
  objects in it.
- Yes, the developers know it, and they said: there is a patch existing
  to workaround it.
- No, they don't include it in 7.1. The reason: if you use that patch,
  pg_dumpall will not work. If somebody will have the strength in
  him to fix it, than it will be considered to include it in the base.

After collecting these informations from more experienced people,
I calmed down. Since I am in the beginning of creating my project,
I think for the time when I will need it, it will be ready.

Anyway, I do not know where this patch is. If you don't bother
about pg_dumpall, ask a developer (a am only a wannabe developer)
about it.

If anyone detects that I wrote silly things, please do correct me.

Bye,
Baldvin