pg.ddx.io pgsql-admin@postgresql.org mailing list archivehelp / color / mirror / Atom feed
Couple of admin Qs 3+ messages / 3 participants [nested] [flat]
* Couple of admin Qs @ 2010-08-20 12:46 Lou Picciano <loupicciano@comcast.net> 2010-08-20 16:07 ` Re: Couple of admin Qs Kevin Grittner <Kevin.Grittner@wicourts.gov> 2010-08-20 16:28 ` Re: Couple of admin Qs Joshua D. Drake <jd@commandprompt.com> 0 siblings, 2 replies; 3+ messages in thread From: Lou Picciano @ 2010-08-20 12:46 UTC (permalink / raw) To: pgsql-admin Pg Admins, As many of you have done these things already (and yes, I have to dig further into the docs...) - Is there a privileges incantation which will limit a user's view, within a given cluster, to only those databases to which he can connect? Ie, he'd see only the 3 or 4 databases to which he has privileges? Does the privileges model permit this level of granularity? - Can someone point to an example of how to 'trigger' an event when a user logs on/off, or performs other non-data-touching actions, such as connecting to another database? Can't build a trigger on a function call, right? Has to be based on a data change? Tks in advance - Lou ^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Couple of admin Qs 2010-08-20 12:46 Couple of admin Qs Lou Picciano <loupicciano@comcast.net> @ 2010-08-20 16:07 ` Kevin Grittner <Kevin.Grittner@wicourts.gov> 1 sibling, 0 replies; 3+ messages in thread From: Kevin Grittner @ 2010-08-20 16:07 UTC (permalink / raw) To: Lou Picciano <loupicciano@comcast.net>; pgsql-admin Lou Picciano <loupicciano@comcast.net> wrote: > - Is there a privileges incantation which will limit a user's > view, within a given cluster, to only those databases to which he > can connect? Ie, he'd see only the 3 or 4 databases to which he > has privileges? Does the privileges model permit this level of > granularity? No. Perhaps some day, when we get row-level permissions.... > - Can someone point to an example of how to 'trigger' an event > when a user logs on/off, or performs other non-data-touching > actions, such as connecting to another database? There might be a hook, but those aren't really covered in user documentation, since they're intended more for people writing features for the database itself. I've never gone looking for those, since I don't have an application for them, so I don't really know. > Can't build a trigger on a function call, right? Has to > be based on a data change? Well, a trigger is just a way to automatically call a function. You can do that within any particular function without needing to wire it up with a trigger definition. -Kevin ^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Couple of admin Qs 2010-08-20 12:46 Couple of admin Qs Lou Picciano <loupicciano@comcast.net> @ 2010-08-20 16:28 ` Joshua D. Drake <jd@commandprompt.com> 1 sibling, 0 replies; 3+ messages in thread From: Joshua D. Drake @ 2010-08-20 16:28 UTC (permalink / raw) To: Lou Picciano <loupicciano@comcast.net>; +Cc: pgsql-admin On Fri, 2010-08-20 at 12:46 +0000, Lou Picciano wrote: > Pg Admins, > > > As many of you have done these things already (and yes, I have to dig > further into the docs...) > > > - Is there a privileges incantation which will limit a user's view, > within a given cluster, to only those databases to which he can > connect? Ie, he'd see only the 3 or 4 databases to which he has > privileges? Does the privileges model permit this level of > granularity? They will be able to see every database but they won't be able to connect unless you allow them, i.e; you can't stop them from executing select * from pg_database but you can't stop them from actually connecting to any of them. > - Can someone point to an example of how to 'trigger' an event when a > user logs on/off, or performs other non-data-touching actions, such as > connecting to another database? That is called logging. Just turn it on :D > Can't build a trigger on a function call, right? Has to be based on > a data change? A trigger is based on data modification, yes. Joshua D. Drake > > > Tks in advance - Lou -- PostgreSQL.org Major Contributor Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579 Consulting, Training, Support, Custom Development, Engineering http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt ^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2010-08-20 16:28 UTC | newest] Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2010-08-20 12:46 Couple of admin Qs Lou Picciano <loupicciano@comcast.net> 2010-08-20 16:07 ` Kevin Grittner <Kevin.Grittner@wicourts.gov> 2010-08-20 16:28 ` Joshua D. Drake <jd@commandprompt.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox