From: BRUNO CESAR BERNARDES <bruno.bernardes@embrapa.br>
To: Felipe Santos <felipepts@gmail.com>
Cc: gilberto castillo <gilberto.castillo@etecsa.cu>
Cc: pgsql-admin@postgresql.org
Subject: Re: Catalog permissions
Date: Wed, 1 Apr 2015 15:42:56 -0300 (BRT)
Message-ID: <289729490.15317949.1427913776979.JavaMail.root@embrapa.br> (raw)
In-Reply-To: <CAPYcRiXSFgnytMdEDmyDyCp1kcRzC4nFp4DL=wQWrCuYdmoJbQ@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Dear Felipe,
No. I am not using PgAdmin3, I am using PgPHPAdmin and I could not find a similar option on it.
To solve my problem the best thing would be restrict the Postgres catalog to the objects that the user has permission.
Best regards,
----- Mensagem original -----
De: "Felipe Santos" <felipepts@gmail.com>
Para: "BRUNO CESAR BERNARDES" <bruno.bernardes@embrapa.br>
Cc: "gilberto castillo" <gilberto.castillo@etecsa.cu>, pgsql-admin@postgresql.org
Enviadas: Terça-feira, 31 de março de 2015 16:53:29
Assunto: Re: [ADMIN] Catalog permissions
2015-03-31 16:44 GMT-03:00 BRUNO CESAR BERNARDES < bruno.bernardes@embrapa.br > :
Thanks Gilberto,
The problem still the same.
The user is allowed to see the entire installation catalog, all databases, all schemas, etc. Of course, he is allowed to see data only in the schema that I gave this permission.
The ideia is to be shoed to him only the datbase end schema that he has permission.
I applied the command "Alter user myuser set default_transaction_read_only = on;" to this user . The others were already set.
Saludos,
Bruno
De: "Gilberto Castillo" < gilberto.castillo@etecsa.cu >
Para: "BRUNO CESAR BERNARDES" < bruno.bernardes@embrapa.br >
Cc: pgsql-admin@postgresql.org
Enviadas: Terça-feira, 31 de março de 2015 12:59:11
Assunto: Re: [ADMIN] Catalog permissions
> Hi,
>
> I have to allow one user to use my Postgres installation in one schema of
> several. We are preparing an phpPGAdmin installation to give an remote
> access to this schema.
> The phpPDAdmin is showing the entire catalog to this user and allowing
> access only in the schema that I gave permissions to him.
> How do I do to this user can see only the schema that he has access, not
> the entire catalog.
> Is it possible?
Use:
GRANT usage on schema zzz to uuu;
Alter user uuu set default_transaction_read_only = on;
GRANT select on all tables in schema zzz to uuu;
Saludos,
Gilberto Castillo
ETECSA, La Habana, Cuba
---
This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running at host imx3.etecsa.cu
Visit our web-site: < http://www.kaspersky.com >, < http://www.viruslist.com >
--
Sent via pgsql-admin mailing list ( pgsql-admin@postgresql.org )
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
-
________________ ____________________________________________________________
Aviso de confidencialidade.
Esta mensagem da Empresa Brasileira de Pesq uisa Agropecuária (Embrapa), empresa pùblica federal regi da pelo disposto na Lei Federal no. 5.851, de 7 de dezembro de 1972, & eacute; enviada exclusivamente a seu destinatário e pode conter i nformações confidenciais, protegidas por sigilo profissional . Sua utilização desautorizada é ilegal e sujeita o infrator às penas da lei. Se você a recebeu indevidamente, queira, por gentileza, reenviá-la ao emitente, esclarecendo o equ&i acute;voco.
Confidentiality note
This message from Empresa Brasileira de Pesquisa Agropecuária (Embrapa), a govern ment company established under Brazilian law (5.851/72), is directed ex clusively to its addressee and may contain confidential data, protected under professional secrecy rules. Its unauthorized use is illegal and may subject the transgressor to the law's penalties. If you are not the a ddressee, please send it back, elucidating the failure.
Olá Bruno,
Is this what you are looking for?
Link: http://stackoverflow.com/questions/12663639/how-to-hide-databases-that-i-am-not-allowed-to-access
Regards
--
Bruno César Bernardes, Analista
Coordenadoria de Gestão de Infraestrutura
Departamento de Tecnologia da Informação (DTI)
Empresa Brasileira de Pesquisa Agropecuária (Embrapa)
Brasília/DF
bruno.bernardes@embrapa.br
Telefone: +55 (61) 3448-1637 | Fax: +55 (61) 3448-4313
www.embrapa.br | twitter.com/embrapa
Confira também: www.facebook.com/agrosustentavel
________________________________________________________________________
____
Aviso de confidencialidade
Esta mensagem da Empresa Brasileira
de Pesquisa Agropecuaria (Embrapa),
empresa publica federal regida pel
o disposto na Lei Federal no. 5.851, de
7 de dezembro de 1972, e envia
da exclusivamente a seu destinatario e pode
conter informacoes confidenc
iais, protegidas por sigilo profissional. Sua
utilizacao desautorizada
e ilegal e sujeita o infrator as penas da lei. Se
voce a recebeu indevid
amente, queira, por gentileza, reenvia-la ao emitente,
esclarecendo o equi
voco.
Confidentiality note
This message from Empresa Brasileira d
e Pesquisa Agropecuaria (Embrapa), a
government company established und
er Brazilian law (5.851/72), is directed
exclusively to its addressee
and may contain confidential data, protected
under professional secrecy
rules. Its unauthorized use is illegal and may
subject the transgresso
r to the law's penalties. If you are not the addressee,
please send it bac
k, elucidating the failure.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: bruno.bernardes@embrapa.br, felipepts@gmail.com, gilberto.castillo@etecsa.cu
Subject: Re: Catalog permissions
In-Reply-To: <289729490.15317949.1427913776979.JavaMail.root@embrapa.br>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox