From: Tom Lane <tgl@sss.pgh.pa.us>
To: Greg Williamson <gwilliamson39@yahoo.com>
Cc: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: allow a user to see current_query in pg_stat_activity in 8.4
Date: Thu, 13 Dec 2012 22:16:36 -0500
Message-ID: <18307.1355454996@sss.pgh.pa.us> (raw)
In-Reply-To: <1355453967.41645.YahooMailNeo@web125905.mail.ne1.yahoo.com>
References: <1355453967.41645.YahooMailNeo@web125905.mail.ne1.yahoo.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Greg Williamson <gwilliamson39@yahoo.com> writes:
> We want to create a role used by a monitor to check for "<IDLE> in Transaction" with the most restrictive permissions we can on a 8.4.13 instance.
> The user has been granted connect privilege to the database and some limited permissions to user tabhles that need to be monitored. But pg_stat_activity shows only "<insufficient privilege>"
Yup. You can only see the query of another session if (1) you are a
superuser, or (2) you are the same user the other session is logged in
as. Table permissions have nothing to do with this.
regards, tom lane
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: tgl@sss.pgh.pa.us, gwilliamson39@yahoo.com
Subject: Re: allow a user to see current_query in pg_stat_activity in 8.4
In-Reply-To: <18307.1355454996@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox