Subject: Re: Restrict permissions on schema to hide pl/pgsql code
To: pgsql-admin@lists.postgresql.org
References: 
 <CAMn6ZARbP+r=AdDpFG1xC217=+mMVOsqnVBLL4Pf+ktDJt33gA@mail.gmail.com>
 <CAKFQuwasburx+UXm9Do9CFVRKFtET=US2zrYnrJcGW9aob5xrg@mail.gmail.com>
 <CAMn6ZASyECgGPn1TtPnimgBXjFY--=Ay7SYFouvVG4PV3NSrJQ@mail.gmail.com>
 <CAKFQuwak90CZEsyuCqGeibmRsH-9pzer8O086mzgomdGtF-TSA@mail.gmail.com>
 <30893.1563988539@sss.pgh.pa.us>
 <CAGA3vBuMYQfN7oGb9uH4mU-jb-N10=oh1S6VTJuMOb_HPz3mFQ@mail.gmail.com>
From: Thomas Kellerer <spam_eater@gmx.net>
Message-ID: <3e2c013d-0e68-c217-13cd-7c4a78433eba@gmx.net>
Date: Wed, 24 Jul 2019 20:59:35 +0200
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.21)
 Gecko/20090302 Thunderbird/2.0.0.21 Mnenhy/0.7.5.666
MIME-Version: 1.0
In-Reply-To: 
 <CAGA3vBuMYQfN7oGb9uH4mU-jb-N10=oh1S6VTJuMOb_HPz3mFQ@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: de-DE
Content-Transfer-Encoding: quoted-printable
Precedence: bulk

richard coleman schrieb am 24.07.2019 um 19:44:
> I guess that just means postgresql /probably/=C2=A0shouldn't be used in =
a multi-tenancy situation if you need;
>
>   * complete isolation between tenants
>   * you still want to give tenants direct and otherwise unfettered acces=
s to the database

You can use one database per tenant if you want that kind of isolation.