Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1YdNbm-0000G9-6y for pgsql-admin@arkaria.postgresql.org; Wed, 01 Apr 2015 18:43:22 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1YdNbk-0001FE-VH for pgsql-admin@arkaria.postgresql.org; Wed, 01 Apr 2015 18:43:21 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1YdNbj-0001F7-MG for pgsql-admin@postgresql.org; Wed, 01 Apr 2015 18:43:19 +0000 Received: from mamona.sede.embrapa.br ([200.202.168.1]) by magus.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1YdNbc-0005Uy-Ue for pgsql-admin@postgresql.org; Wed, 01 Apr 2015 18:43:18 +0000 Received: by mamona.sede.embrapa.br (Postfix, from userid 496) id 202D81C2D98; Wed, 1 Apr 2015 15:43:10 -0300 (BRT) Received: from zmta08.sede.embrapa.br (zmta08.sede.embrapa.br [10.170.20.13]) by mamona.sede.embrapa.br (Postfix) with ESMTP id 7E5E61C2D98; Wed, 1 Apr 2015 15:43:07 -0300 (BRT) Received: from localhost (localhost.localdomain [127.0.0.1]) by zmta08.sede.embrapa.br (Postfix) with ESMTP id 72FF6385668; Wed, 1 Apr 2015 15:43:07 -0300 (BRT) X-Virus-Scanned: amavisd-new at zmta08.sede.embrapa.br Received: from zmta08.sede.embrapa.br ([127.0.0.1]) by localhost (zmta08.sede.embrapa.br [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4IxJaT1ykVWO; Wed, 1 Apr 2015 15:42:57 -0300 (BRT) Received: from zmbox03.sede.embrapa.br (zmbox03.sede.embrapa.br [10.170.20.185]) by zmta08.sede.embrapa.br (Postfix) with ESMTP id 05A1C385758; Wed, 1 Apr 2015 15:42:57 -0300 (BRT) Date: Wed, 1 Apr 2015 15:42:56 -0300 (BRT) From: BRUNO CESAR BERNARDES To: Felipe Santos Cc: gilberto castillo , pgsql-admin@postgresql.org Message-ID: <289729490.15317949.1427913776979.JavaMail.root@embrapa.br> In-Reply-To: Subject: Re: Catalog permissions MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_15317948_2016788934.1427913776978" X-Originating-IP: [200.202.168.177] X-Mailer: Zimbra 7.2.4_GA_2900 (ZimbraWebClient - FF3.0 (Linux)/7.2.4_GA_2900) X-Copyrighted-Material: Please visit http://www.embrapa.br X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org ------=_Part_15317948_2016788934.1427913776978 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Dear Felipe,=20 No. I am not using PgAdmin3, I am using PgPHPAdmin and I could not find a s= imilar option on it.=20 To solve my problem the best thing would be restrict the Postgres catalog t= o the objects that the user has permission.=20 Best regards,=20 ----- Mensagem original ----- De: "Felipe Santos" =20 Para: "BRUNO CESAR BERNARDES" =20 Cc: "gilberto castillo" , pgsql-admin@postgres= ql.org=20 Enviadas: Ter=E7a-feira, 31 de mar=E7o de 2015 16:53:29=20 Assunto: Re: [ADMIN] Catalog permissions=20 2015-03-31 16:44 GMT-03:00 BRUNO CESAR BERNARDES < bruno.bernardes@embrapa.= br > :=20 Thanks Gilberto,=20 The problem still the same.=20 The user is allowed to see the entire installation catalog, all databases, = all schemas, etc. Of course, he is allowed to see data only in the schema t= hat I gave this permission.=20 The ideia is to be shoed to him only the datbase end schema that he has per= mission.=20 I applied the command "Alter user myuser set default_transaction_read_only = =3D on;" to this user . The others were already set.=20 Saludos,=20 Bruno=20 De: "Gilberto Castillo" < gilberto.castillo@etecsa.cu >=20 Para: "BRUNO CESAR BERNARDES" < bruno.bernardes@embrapa.br >=20 Cc: pgsql-admin@postgresql.org=20 Enviadas: Ter=E7a-feira, 31 de mar=E7o de 2015 12:59:11=20 Assunto: Re: [ADMIN] Catalog permissions=20 > Hi,=20 >=20 > I have to allow one user to use my Postgres installation in one schema of= =20 > several. We are preparing an phpPGAdmin installation to give an remote=20 > access to this schema.=20 > The phpPDAdmin is showing the entire catalog to this user and allowing=20 > access only in the schema that I gave permissions to him.=20 > How do I do to this user can see only the schema that he has access, not= =20 > the entire catalog.=20 > Is it possible?=20 Use:=20 GRANT usage on schema zzz to uuu;=20 Alter user uuu set default_transaction_read_only =3D on;=20 GRANT select on all tables in schema zzz to uuu;=20 Saludos,=20 Gilberto Castillo=20 ETECSA, La Habana, Cuba=20 ---=20 This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running= at host imx3.etecsa.cu=20 Visit our web-site: < http://www.kaspersky.com >, < http://www.viruslist.co= m >=20 --=20 Sent via pgsql-admin mailing list ( pgsql-admin@postgresql.org )=20 To make changes to your subscription:=20 http://www.postgresql.org/mailpref/pgsql-admin=20 -=20 ________________ __________________________________________________________= __=20 Aviso de confidencialidade.=20 Esta mensagem da Empresa Brasileira de Pesq uisa Agropecu=E1ria (Embrapa), = empresa p=F9blica federal regi da pelo disposto na Lei Federal no. 5.851, d= e 7 de dezembro de 1972, & eacute; enviada exclusivamente a seu destinat=E1= rio e pode conter i nforma=E7=F5es confidenciais, protegidas por sigilo pro= fissional . Sua utiliza=E7=E3o desautorizada =E9 ilegal e sujeita o infrato= r =E0s penas da lei. Se voc=EA a recebeu indevidamente, queira, por gentile= za, reenvi=E1-la ao emitente, esclarecendo o equ&i acute;voco.=20 Confidentiality note=20 This message from Empresa Brasileira de Pesquisa Agropecu=E1ria (Embrapa), = a govern ment company established under Brazilian law (5.851/72), is direct= ed ex clusively to its addressee and may contain confidential data, protect= ed under professional secrecy rules. Its unauthorized use is illegal and ma= y subject the transgressor to the law's penalties. If you are not the a ddr= essee, please send it back, elucidating the failure.=20 Ol=E1 Bruno,=20 Is this what you are looking for?=20 Link: http://stackoverflow.com/questions/12663639/how-to-hide-databases-tha= t-i-am-not-allowed-to-access=20 Regards=20 --=20 Bruno C=E9sar Bernardes, Analista=20 Coordenadoria de Gest=E3o de Infraestrutura=20 Departamento de Tecnologia da Informa=E7=E3o (DTI)=20 Empresa Brasileira de Pesquisa Agropecu=E1ria (Embrapa)=20 Bras=EDlia/DF=20 bruno.bernardes@embrapa.br=20 Telefone: +55 (61) 3448-1637 | Fax: +55 (61) 3448-4313=20 www.embrapa.br | twitter.com/embrapa=20 Confira tamb=E9m: www.facebook.com/agrosustentavel=20 =0A________________________________________________________________________= ____=0AAviso de confidencialidade =0A=0AEsta mensagem da Empresa Brasileira= de Pesquisa Agropecuaria (Embrapa),=0Aempresa publica federal regida pel= o disposto na Lei Federal no. 5.851, de=0A7 de dezembro de 1972, e envia= da exclusivamente a seu destinatario e pode=0Aconter informacoes confidenc= iais, protegidas por sigilo profissional. Sua=0Autilizacao desautorizada = e ilegal e sujeita o infrator as penas da lei. Se=0Avoce a recebeu indevid= amente, queira, por gentileza, reenvia-la ao emitente,=0Aesclarecendo o equi= voco.=0A=0AConfidentiality note=0A=0AThis message from Empresa Brasileira d= e Pesquisa Agropecuaria (Embrapa), a=0Agovernment company established und= er Brazilian law (5.851/72), is directed=0Aexclusively to its addressee = and may contain confidential data, protected=0Aunder professional secrecy= rules. Its unauthorized use is illegal and may=0Asubject the transgresso= r to the law's penalties. If you are not the addressee,=0Aplease send it bac= k, elucidating the failure.=0A=0A=0A ------=_Part_15317948_2016788934.1427913776978 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <= div style=3D'font-family: arial,helvetica,sans-serif; font-size: 12pt; colo= r: #000000'>Dear Felipe,

   No. I am not using PgAdmin3, I= am using PgPHPAdmin and I could not find a similar option on it.
 = To solve my problem the best thing would be restrict the Postgres catalog = to the objects that the user has permission.

Best regards,

&= nbsp;

De: "Felipe Santos" <felipepts@gmail.com><= br>Para: "BRUNO CESAR BERNARDES" <bruno.bernardes@embrapa.br><= br>Cc: "gilberto castillo" <gilberto.castillo@etecsa.cu>, pgsq= l-admin@postgresql.org
Enviadas: Ter=E7a-feira, 31 de mar=E7o de = 2015 16:53:29
Assunto: Re: [ADMIN] Catalog permissions



2015-03-31 16:44 GMT-03:00 BRUNO CESAR BERNARDES <bruno.bernarde= s@embrapa.br>:
Thanks Gil= berto,

    The problem still the same.
 &nbs= p;  The user is allowed to see the entire installation catalog, all da= tabases, all schemas, etc. Of course, he is allowed to see data only in the= schema that I gave this permission.
    The ideia is to be sh= oed to him only the datbase end schema that he has permission. 
&n= bsp;   I applied the command  "Alter user myuser set default= _transaction_read_only =3D on;"  to this user . The others were alread= y set.

Saludos,
Bruno

De: "Gilberto Castillo" <gilberto.cas= tillo@etecsa.cu>
Para: "BRUNO CESAR BERNARDES" <bruno.bernardes@em= brapa.br>
Cc: pgsql-admin@postgresql.org
Enviadas: Ter= =E7a-feira, 31 de mar=E7o de 2015 12:59:11
Assunto: Re: [ADMIN] C= atalog permissions




> Hi,
>> I have to allow one user to use my Postgres installation in one sche= ma of
> several. We are preparing an phpPGAdmin installation to give = an remote
> access to this schema.
> The phpPDAdmin is showing = the entire catalog to this user and allowing
> access only in the sch= ema that I gave permissions to him.
> How do I do to this user can se= e only the schema that he has access, not
> the entire catalog.
&g= t; Is it possible?

Use:

GRANT usage on schema zzz to uuu;
= Alter user uuu set default_transaction_read_only =3D on;
GRANT select on= all tables in schema zzz to uuu;


Saludos,
Gilberto Castillo<= br>ETECSA, La Habana, Cuba

---
This message was proc= essed by Kaspersky Mail Gateway 5.6.28/RELEASE running at host imx3.etecsa.cu
Visit our web= -site: <http://ww= w.kaspersky.com>, <http://www.viruslist.com>


--
Sent via pgsql-= admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscri= ption:
http://www.postgresql.org/mailpref/pgsql-admin


-



________________ ____________________________________________________________
Aviso de=20 confidencialidade.

Esta mensagem da Empresa Brasileira de Pesq uisa Agropecu=E1ria (Embrapa), empresa p=F9blica federal regi da pelo disposto na Lei Federal no. 5.851, de 7 de dezembro de 1972, & eacute; enviada exclusivamente a seu destinat=E1rio e pode conter i nforma=E7=F5es confidenciais, protegidas por sigilo profissional . Sua utiliza=E7=E3o desautorizada =E9 ilegal e sujeita o infrator =E0s penas da lei. Se voc=EA a recebeu indevidamente,=20 queira, por gentileza, reenvi=E1-la ao emitente, esclarecendo o equ&i acute;voco.

Confidentiality note

This message from Empresa Brasileira de Pesquisa Agropecu=E1ria (Embrapa), a govern ment company established under Brazilian law (5.851/72), is directed ex clusively to its addressee and may contain confidential data, protected under professional secrecy rules. Its unauthorized use is illegal and=20 may subject the transgressor to the law's penalties. If you are not the a ddressee, please send it back, elucidating the failure.




Ol=E1 Bruno,

Is this what you are looking for?

Link: http://stackoverflow.com/qu= estions/12663639/how-to-hide-databases-that-i-am-not-allowed-to-access<= /div>

Regard= s



--
Bruno C=E9sar Bernard= es, Analista
Coordenadoria de Gest=E3o de Infraestrutura
Departamento= de Tecnologia da Informa=E7=E3o (DTI)
Empresa Brasileira de Pesquisa Ag= ropecu=E1ria (Embrapa)
Bras=EDlia/DF

bruno.bernardes@embrapa.brTelefone: +55 (61) 3448-1637  |  Fax: +55 (61) 3448-4313 &= nbsp;   
www.embrapa.br | twitter.com/embrapa
Confira= tamb=E9m: www.facebook.com/agrosustentavel



= =0A=0A

=0A
________________= ____________________________________________________________=0A
Aviso de = confidencialidade.=0A

=0AEsta mensagem da Empresa Brasileira de Pesq= uisa Agropecuária (Embrapa),=0Aempresa pùblica federal regi= da pelo disposto na Lei Federal no. 5.851, de=0A7 de dezembro de 1972, &= eacute; enviada exclusivamente a seu destinatário e pode=0Aconter i= nformações confidenciais, protegidas por sigilo profissional= . Sua=0Autilização desautorizada é ilegal e sujeita o= infrator às penas da lei. Se=0Avocê a recebeu indevidamente, = queira, por gentileza, reenviá-la ao emitente,=0Aesclarecendo o equ&i= acute;voco.=0A

=0AConfidentiality note=0A

=0AThis message from= Empresa Brasileira de Pesquisa Agropecuária (Embrapa), a=0Agovern= ment company established under Brazilian law (5.851/72), is directed=0Aex= clusively to its addressee and may contain confidential data, protected= =0Aunder professional secrecy rules. Its unauthorized use is illegal and = may=0Asubject the transgressor to the law's penalties. If you are not the a= ddressee,=0Aplease send it back, elucidating the failure.=0A
=0A= =0A=0A=0A
= ------=_Part_15317948_2016788934.1427913776978--