Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtp (Exim 4.84_2)
	(envelope-from
 <pgsql-admin-owner+M47113=pgsql+2Dadmin=arkaria.postgresql.org@postgresql.org>)
	id 1dzVBh-0008V6-Op
	for pgsql-admin@arkaria.postgresql.org; Tue, 03 Oct 2017 21:57:13 +0000
Received: from localhost ([127.0.0.1] helo=postgresql.org)
	by malur.postgresql.org with smtp (Exim 4.84_2)
	(envelope-from
 <pgsql-admin-owner+M47113=pgsql+2Dadmin=arkaria.postgresql.org@postgresql.org>)
	id 1dzVBh-000751-BY
	for pgsql-admin@arkaria.postgresql.org; Tue, 03 Oct 2017 21:57:13 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256)
	(Exim 4.84_2)
	(envelope-from <pinker@onet.eu>)
	id 1dzV9s-0002Px-5v
	for pgsql-admin@postgresql.org; Tue, 03 Oct 2017 21:55:20 +0000
Received: from n3.nabble.com ([162.255.23.22])
	by magus.postgresql.org with esmtp (Exim 4.84_2)
	(envelope-from <pinker@onet.eu>)
	id 1dzV9o-0001Cq-Hm
	for pgsql-admin@postgresql.org; Tue, 03 Oct 2017 21:55:19 +0000
Received: from n3.nabble.com (localhost [127.0.0.1])
	by n3.nabble.com (Postfix) with ESMTP id 11E278AABDA9
	for <pgsql-admin@postgresql.org>; Tue,  3 Oct 2017 14:55:15 -0700 (MST)
Date: Tue, 3 Oct 2017 14:55:15 -0700 (MST)
From: pinker <pinker@onet.eu>
To: pgsql-admin@postgresql.org
Message-ID: <1507067715071-0.post@n3.nabble.com>
In-Reply-To: 
 <CAJJTqWT-17TXbQe0NfkMBQe+tG39nT1ojtCatu=Mv8gjxD_Gbw@mail.gmail.com>
References: 
 <CAJJTqWT6FPxptJKuPVmDqjwE8GgX7ANtjDC+Shx89p+KPczzOw@mail.gmail.com>
 <CAKFQuwaFH-QKdQUUWfRDnJcHOx5cpMoy5d5RGG4hO=xaX+8B7Q@mail.gmail.com>
 <CAJJTqWQWRgCQyVR1Zvs_vvVmEW+RK=6k2+kZBxA=kSCvAXbycQ@mail.gmail.com>
 <CAKq0gv+CxtK72wn3-rymeyt0NJqeKqLjj4wWwK+himG3HpUmuw@mail.gmail.com>
 <CAJJTqWT-17TXbQe0NfkMBQe+tG39nT1ojtCatu=Mv8gjxD_Gbw@mail.gmail.com>
Subject: Re: Acess Control !
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
List-Archive: <http://archives.postgresql.org/pgsql-admin>
List-Help: <mailto:majordomo@postgresql.org?body=help>
List-ID: <pgsql-admin.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@postgresql.org>
List-Post: <mailto:pgsql-admin@postgresql.org>
List-Subscribe: <mailto:majordomo@postgresql.org?body=sub%20pgsql-admin>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
X-Mailing-List: pgsql-admin
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

be careful with order change. This proposed by Scott was correct; yours will
reject all the connections made by user system to xpto. Documentation says:

> The first record with a matching connection type, client address,
> requested database, and user name is used to perform authentication. There
> is no "fall-through" or "backup": if one record is chosen and the
> authentication fails, subsequent records are not considered.





--
Sent from: http://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin