Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1UYGZu-00088t-B5 for pgsql-admin@arkaria.postgresql.org; Fri, 03 May 2013 14:03:14 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.72) (envelope-from ) id 1UYGZt-0002Ig-Rn for pgsql-admin@arkaria.postgresql.org; Fri, 03 May 2013 14:03:13 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1UYGZt-0002Ib-7h for pgsql-admin@postgresql.org; Fri, 03 May 2013 14:03:13 +0000 Received: from mar.marlinmobile.com ([174.121.17.99]) by magus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1UYGZm-0002rv-4n for pgsql-admin@postgresql.org; Fri, 03 May 2013 14:03:12 +0000 Received: from it-desktop-pat.med.harvard.edu ([134.174.140.63]:33410 helo=unknown) by mar.marlinmobile.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.80) (envelope-from ) id 1UYGZk-0007zN-AT for pgsql-admin@postgresql.org; Fri, 03 May 2013 14:03:04 +0000 Date: Fri, 3 May 2013 10:03:02 -0400 From: matthias ritzkowski To: pgsql-admin@postgresql.org Subject: Best practice to create a read-only user? Message-ID: <20130503100302.0000043e@unknown> Organization: marlin mobile X-Mailer: Claws Mail 3.8.1 (GTK+ 2.16.6; i586-pc-mingw32msvc) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - mar.marlinmobile.com X-AntiAbuse: Original Domain - postgresql.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - marlinmobile.com X-Get-Message-Sender-Via: mar.marlinmobile.com: authenticated_id: matthias@marlinmobile.com X-Pg-Spam-Score: -1.7 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org Hello, Usually I would create user uuu password 'ppp'; GRANT usage on schema zzz to uuu; GRANT select on all tables in schema zzz to uuu; But just this morning someone used create user uuu password 'ppp'; alter user uuu set default_transaction_read_only = on; GRANT select on all tables in schema zzz to uuu; So I only added the grant usage and it worked fine. What do people use day to day? I had frankly never explored the default_transaction_read_only parameter ... -- regards Matthias Ritzkowski -marlinmobile- -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin