From: Rainer Leo <leo@workfile.de>
To: pgsql-admin@postgresql.org
Subject: Best procedure for restricted access
Date: Mon, 12 Sep 2011 15:03:41 +0200
Message-ID: <467293622.20110912150341@workfile.de> (raw)
Hello,
I have been asked to configure a database role
to be used for ODBC access.
So far I have done this:
CREATE ROLE odbc_user LOGIN
ENCRYPTED PASSWORD 'bar'
NOSUPERUSER INHERIT NOCREATEDB NOCREATEROLE;
REVOKE ALL ON DATABASE foo FROM odbc_user;
REVOKE CREATE ON SCHEMA public FROM public;
GRANT SELECT ON v_sales TO odbc_user;
When I try:
foo-> SELECT * FROM customers;
access is denied as expected
foo->\d baz
I see table definitions.
How can I restrict the role "odbc_user" to just
"SELECT whatever FROM v_sales;" and nothing else?
Any help would be very appreciated.
Regards,
Rainer Leo
workfile Datenbankservice
Bocksberg 20c
D-22395 Hamburg
Fon: 040.60 44 90 41
Fax: 040.34 92 61 08
www.workfile.de
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: leo@workfile.de
Subject: Re: Best procedure for restricted access
In-Reply-To: <467293622.20110912150341@workfile.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox