Обсуждение: Hiding users and databases
Hi all, We run database servers that each contain multiple customer databases. We would like to give customers access to their own database but even though they are unable to connect to the databases of other customers due to connect grants they are still able to see all other databases and users on the server. Is there a way to mask or hide databases which they don’t have connect grants to and hide users/roles aside from their own? I have found some methods involving modifying the system catalogs but would prefer not to do this. I would like to avoid renaming all users/databases to non-identifiable names if possible but so far I think this is my only option. Any other suggestions would be appreciated. Thanks, Ross
On Fri, Oct 17, 2014 at 01:48:25PM +1100, Ross Dougherty wrote: > Hi all, > > We run database servers that each contain multiple customer databases. > We would like to give customers access to their own database but even > though they are unable to connect to the databases of other customers > due to connect grants they are still able to see all other databases > and users on the server. > > Is there a way to mask or hide databases which they don’t have connect > grants to and hide users/roles aside from their own? I have found some > methods involving modifying the system catalogs but would prefer not > to do this. I would like to avoid renaming all users/databases to > non-identifiable names if possible but so far I think this is my only > option. Any other suggestions would be appreciated. I know of now way to do this except use random strings for usernames and database names. -- Bruce Momjian <bruce@momjian.us> http://momjian.us EnterpriseDB http://enterprisedb.com + Everyone has their own god. +
Ross Dougherty <ross@dougherty.id.au> wrote: > Hi all, > > We run database servers that each contain multiple customer databases. > We would like to give customers access to their own database but even > though they are unable to connect to the databases of other customers > due to connect grants they are still able to see all other databases > and users on the server. > > Is there a way to mask or hide databases which they don’t have connect > grants to and hide users/roles aside from their own? I have found some I'm working for a hosting privider, and we are using this: http://wiki.postgresql.org/wiki/Shared_Database_Hosting (yeah, he is a colleague ...) Andreas -- Really, I'm not out to destroy Microsoft. That will just be a completely unintentional side effect. (Linus Torvalds) "If I was god, I would recompile penguin with --enable-fly." (unknown) Kaufbach, Saxony, Germany, Europe. N 51.05082°, E 13.56889°