From: Joshua D. Drake <jd@commandprompt.com>
To: Lou Picciano <loupicciano@comcast.net>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: Couple of admin Qs
Date: Fri, 20 Aug 2010 09:28:59 -0700
Message-ID: <1282321739.9325.2.camel@jd-desktop.unknown.charter.com> (raw)
In-Reply-To: <222302061.247711.1282308402600.JavaMail.root@sz0093a.westchester.pa.mail.comcast.net>
References: <222302061.247711.1282308402600.JavaMail.root@sz0093a.westchester.pa.mail.comcast.net>
On Fri, 2010-08-20 at 12:46 +0000, Lou Picciano wrote:
> Pg Admins,
>
>
> As many of you have done these things already (and yes, I have to dig
> further into the docs...)
>
>
> - Is there a privileges incantation which will limit a user's view,
> within a given cluster, to only those databases to which he can
> connect? Ie, he'd see only the 3 or 4 databases to which he has
> privileges? Does the privileges model permit this level of
> granularity?
They will be able to see every database but they won't be able to
connect unless you allow them, i.e; you can't stop them from executing
select * from pg_database but you can't stop them from actually
connecting to any of them.
> - Can someone point to an example of how to 'trigger' an event when a
> user logs on/off, or performs other non-data-touching actions, such as
> connecting to another database?
That is called logging. Just turn it on :D
> Can't build a trigger on a function call, right? Has to be based on
> a data change?
A trigger is based on data modification, yes.
Joshua D. Drake
>
>
> Tks in advance - Lou
--
PostgreSQL.org Major Contributor
Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579
Consulting, Training, Support, Custom Development, Engineering
http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: jd@commandprompt.com, loupicciano@comcast.net
Subject: Re: Couple of admin Qs
In-Reply-To: <1282321739.9325.2.camel@jd-desktop.unknown.charter.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox