pg.ddx.io pgsql-admin@postgresql.org mailing list archivehelp / color / mirror / Atom feed
From: Thomas Jacob <jacob@internet24.de>
To: pgsql-admin@postgresql.org
Subject: Best practice running a shared DB hosting server
Date: Wed, 13 Aug 2008 15:44:57 +0200
Message-ID: <1218635097.28547.28.camel@enterprise.ims-firmen.de> (raw)
Hello List,
I was wondering if there is something like
a best practice document for running
PostgreSQL (probably 8.3.3) securely in a shared
Web+DB hosting environment, where different
people without any administrative relationship
between them may run their databases on
the same server.
I am particularly interested in the
role, permission and schema layout.
Also I'm worried about the amount of information
available to ordinary DB users. For instance,
without revoking access to pg_catalog from
PUBLIC all users can see the usernames,
database names etc. of all other users. But
revoking the right from pg_catalog doesn't
seem to be an option, as this breaks
several features of the psql utility and probably
other things.
Thanks & Best Regards,
Thomas
Attachments:
signature.asc (application/pgp-signature, 188B) download
view thread (10+ messages) latest in thread
Message-ID: <1218635097.28547.28.camel@enterprise.ims-firmen.de> Permalink: ../1218635097.28547.28.camel@enterprise.ims-firmen.de/ Also on: postgresql.org/message-id/1218635097.28547.28.camel@enterprise.ims-firmen.de ·
reply
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Reply to all the recipients using the --to and --cc options: reply via email To: pgsql-admin@postgresql.org Cc: jacob@internet24.de Subject: Re: Best practice running a shared DB hosting server In-Reply-To: <1218635097.28547.28.camel@enterprise.ims-firmen.de> * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox