"Ing. Daniel Manrique" <dmanriqu@correo.fca.unam.mx> writes:
> I'd like to configure things so that:
> a) users are unable to modify template1;
If you're on a PG version where template1 isn't the default connection
target, you could just disallow connections to it. But that might just
mean that your problem moves over to the "postgres" database.
> b) Users can't connect to databases other than the ones they created
> (and perhaps the postgres database, for initial connection purposes).
See CONNECT privilege (as of 8.2) and/or modify pg_hba.conf.
regards, tom lane