From: Dan Sabin <dan.sabin@nextwavesys.com>
To: pgsql-admin@postgresql.org
Subject: pgadmin user access control features
Date: Tue, 4 Jan 2011 12:04:56 -0500 (EST)
Message-ID: <24001946.1624.1294160696171.JavaMail.root@mail.nextwavesys.com> (raw)
In-Reply-To: <13538541.1618.1294160668156.JavaMail.root@mail.nextwavesys.com>
Hello,
So I plan on deploying a Postgres DB in an military project. On our admin end we are using the tool to help set up the database for delivery. Now the problem comes once the system is delivered. The database is used to record all the system messages for easy retrieval. This feature is rarely used and is only there if the system accidentally kills someone (Military grade security system with guns), the client needs to be able to reconstruct the event.
In order to do this the client needs an interface to access the database. The two options are to give them a query tool we design so we can restrict their actions (to prevent the database from being screwed up). The other option would be to restrict their access in the pgadmin tool installed on the system itself and prevent them from deleting data. Is it possible to set up accounts within the tool and secure the admin access for ourselves so they can only run certain types of queries on their own account.
I know this is possible with MS SQL Server tools, but we're bound to open source solutions. Any information would be useful.
Thank you,
Dan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: dan.sabin@nextwavesys.com
Subject: Re: pgadmin user access control features
In-Reply-To: <24001946.1624.1294160696171.JavaMail.root@mail.nextwavesys.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox