Date: Tue, 4 Jan 2011 12:04:56 -0500 (EST)
From: Dan Sabin <dan.sabin@nextwavesys.com>
To: pgsql-admin@postgresql.org
Message-ID: <24001946.1624.1294160696171.JavaMail.root@mail.nextwavesys.com>
In-Reply-To: <13538541.1618.1294160668156.JavaMail.root@mail.nextwavesys.com>
Subject: pgadmin user access control features
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Hello,

So I plan on deploying a Postgres DB in an military project. On our admin end we are using the tool to help set up the database for delivery. Now the problem comes once the system is delivered. The database is used to record all the system messages for easy retrieval. This feature is rarely used and is only there if the system accidentally kills someone (Military grade security system with guns), the client needs to be able to reconstruct the event. 

In order to do this the client needs an interface to access the database. The two options are to give them a query tool we design so we can restrict their actions (to prevent the database from being screwed up). The other option would be to restrict their access in the pgadmin tool installed on the system itself and prevent them from deleting data. Is it possible to set up accounts within the tool and secure the admin access for ourselves so they can only run certain types of queries on their own account. 

I know this is possible with MS SQL Server tools, but we're bound to open source solutions. Any information would be useful. 

Thank you,
Dan