From: Julius Tuskenis <julius@nsoft.lt>
Cc: pgsql-admin@postgresql.org
Subject: Re: postgres 8.1 usermanagement problem
Date: Tue, 15 Apr 2008 15:17:38 +0300
Message-ID: <48049CE2.1000008@nsoft.lt> (raw)
In-Reply-To: <c0b9243d0804150507s3315da2k1bb6ca8c3073f89b@mail.gmail.com>
References: <c0b9243d0804150507s3315da2k1bb6ca8c3073f89b@mail.gmail.com>
Did you check the option "Inherits rights from parent roles" (parameter
INHERIT in SQL) for user testus ?
Dmitry Shubin rašė:
> Hallo to all! I use Postgres 8.1 and i've got problem in its
> usermanagement.
>
> Here is me roles list:
> nausd=# \du
> List of roles
> Role name | Superuser | Create role | Create DB | Connections | Member of
> -------------+-----------+-------------+-----------+-------------+--------------
> dss0 | yes | yes | yes | no limit |
> georgyd | no | no | no | no limit | {nausd_read}
> joe | no | no | no | no limit |
> nausd | no | no | no | no limit |
> nausd_read | no | no | no | no limit |
> postgres | yes | yes | yes | no limit |
> sagach_user | no | no | no | no limit |
> system | no | no | no | no limit |
> testgrp | no | no | no | no limit |
> testus | no | no | no | no limit | {testgrp}
> ttest | no | no | no | no limit |
> (11 rows)
>
> testus - user is a member of the testgrp
>
> Then I changed permission in table tbl_a_a_container from database nausd:
>
> nausd=# \z
> Access privileges for database "nausd"
> Schema | Name | Type | Access privileges
> --------+--------------------------------+----------+----------------------------------------------------------------
> public | tbl_a_a_container | table |
> {nausd=arwdRxt/nausd,nausd_read=r/nausd,testgrp=arwdRxt/nausd}
>
> So, we can see all rights for group testgrp and correspondingly for
> testus.
>
> But when I logging to databes nausd with user testus and try to select
> from tbl_a_a_container - I got error: permission denied for relation
> tbl_a_a_container
>
> What's wrong?
>
--
Julius Tuskenis
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: julius@nsoft.lt
Subject: Re: postgres 8.1 usermanagement problem
In-Reply-To: <48049CE2.1000008@nsoft.lt>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox