pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedRevoke delete on a table for super user
4+ messages / 4 participants
[nested] [flat]
* Revoke delete on a table for super user
@ 2016-08-02 17:23 Campbell, Lance <lance@illinois.edu>
2016-08-02 17:27 ` Re: Revoke delete on a table for super user Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 1 reply; 4+ messages in thread
From: Campbell, Lance @ 2016-08-02 17:23 UTC (permalink / raw)
To: pgsql-admin
PostgreSQL 9.5
Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
I know technically you could add the access back but is it possible?
Thanks,
Lance
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Revoke delete on a table for super user
2016-08-02 17:23 Revoke delete on a table for super user Campbell, Lance <lance@illinois.edu>
@ 2016-08-02 17:27 ` Tom Lane <tgl@sss.pgh.pa.us>
2016-08-02 20:27 ` Re: Revoke delete on a table for super user Ondřej Světlík <osvetlik@flexibee.eu>
0 siblings, 1 reply; 4+ messages in thread
From: Tom Lane @ 2016-08-02 17:27 UTC (permalink / raw)
To: Campbell, Lance <lance@illinois.edu>; +Cc: pgsql-admin
"Campbell, Lance" <lance@illinois.edu> writes:
> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
No. Superusers bypass all access controls, by definition. Your best bet
is to not do more than you absolutely must as a superuser.
regards, tom lane
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Revoke delete on a table for super user
2016-08-02 17:23 Revoke delete on a table for super user Campbell, Lance <lance@illinois.edu>
2016-08-02 17:27 ` Re: Revoke delete on a table for super user Tom Lane <tgl@sss.pgh.pa.us>
@ 2016-08-02 20:27 ` Ondřej Světlík <osvetlik@flexibee.eu>
2016-08-02 20:52 ` Re: Revoke delete on a table for super user Bryan Ward <bward@globitech.com>
0 siblings, 1 reply; 4+ messages in thread
From: Ondřej Světlík @ 2016-08-02 20:27 UTC (permalink / raw)
To: pgsql-admin
Dne 2.8.2016 v 19:27 Tom Lane napsal(a):
> "Campbell, Lance" <lance@illinois.edu> writes:
>> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
>
> No. Superusers bypass all access controls, by definition. Your best bet
> is to not do more than you absolutely must as a superuser.
>
> regards, tom lane
>
>
I guess you could achieve this using a trigger.
Regards,
Ondřej
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Revoke delete on a table for super user
2016-08-02 17:23 Revoke delete on a table for super user Campbell, Lance <lance@illinois.edu>
2016-08-02 17:27 ` Re: Revoke delete on a table for super user Tom Lane <tgl@sss.pgh.pa.us>
2016-08-02 20:27 ` Re: Revoke delete on a table for super user Ondřej Světlík <osvetlik@flexibee.eu>
@ 2016-08-02 20:52 ` Bryan Ward <bward@globitech.com>
0 siblings, 0 replies; 4+ messages in thread
From: Bryan Ward @ 2016-08-02 20:52 UTC (permalink / raw)
To: Ondřej Světlík <osvetlik@flexibee.eu>; pgsql-admin
I think your best bet is to create a role and assign the permissions that you want to that role/user. I would not change the anything on the superuser.
Regards,
Bryan
-----Original Message-----
From: pgsql-admin-owner@postgresql.org [mailto:pgsql-admin-owner@postgresql.org] On Behalf Of Ondrej Svetlík
Sent: Tuesday, August 02, 2016 3:28 PM
To: pgsql-admin@postgresql.org
Subject: Re: [ADMIN] Revoke delete on a table for super user
Dne 2.8.2016 v 19:27 Tom Lane napsal(a):
> "Campbell, Lance" <lance@illinois.edu> writes:
>> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
>
> No. Superusers bypass all access controls, by definition. Your best
> bet is to not do more than you absolutely must as a superuser.
>
> regards, tom lane
>
>
I guess you could achieve this using a trigger.
Regards,
Ondřej
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2016-08-02 20:52 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2016-08-02 17:23 Revoke delete on a table for super user Campbell, Lance <lance@illinois.edu>
2016-08-02 17:27 ` Tom Lane <tgl@sss.pgh.pa.us>
2016-08-02 20:27 ` Ondřej Světlík <osvetlik@flexibee.eu>
2016-08-02 20:52 ` Bryan Ward <bward@globitech.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox