pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedpostgres 8.1 usermanagement problem
2+ messages / 2 participants
[nested] [flat]
* postgres 8.1 usermanagement problem
@ 2008-04-15 12:07 Dmitry Shubin <dm.shubin@gmail.com>
0 siblings, 1 reply; 2+ messages in thread
From: Dmitry Shubin @ 2008-04-15 12:07 UTC (permalink / raw)
To: pgsql-admin
Hallo to all! I use Postgres 8.1 and i've got problem in its usermanagement.
Here is me roles list:
nausd=# \du
List of roles
Role name | Superuser | Create role | Create DB | Connections | Member of
-------------+-----------+-------------+-----------+-------------+--------------
dss0 | yes | yes | yes | no limit |
georgyd | no | no | no | no limit | {nausd_read}
joe | no | no | no | no limit |
nausd | no | no | no | no limit |
nausd_read | no | no | no | no limit |
postgres | yes | yes | yes | no limit |
sagach_user | no | no | no | no limit |
system | no | no | no | no limit |
testgrp | no | no | no | no limit |
testus | no | no | no | no limit | {testgrp}
ttest | no | no | no | no limit |
(11 rows)
testus - user is a member of the testgrp
Then I changed permission in table tbl_a_a_container from database nausd:
nausd=# \z
Access privileges for database "nausd"
Schema | Name | Type | Access privileges
--------+--------------------------------+----------+----------------------------------------------------------------
public | tbl_a_a_container | table |
{nausd=arwdRxt/nausd,nausd_read=r/nausd,testgrp=arwdRxt/nausd}
So, we can see all rights for group testgrp and correspondingly for testus.
But when I logging to databes nausd with user testus and try to select from
tbl_a_a_container - I got error: permission denied for relation
tbl_a_a_container
What's wrong?
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: postgres 8.1 usermanagement problem
@ 2008-04-15 12:17 Julius Tuskenis <julius@nsoft.lt>
parent: Dmitry Shubin <dm.shubin@gmail.com>
0 siblings, 0 replies; 2+ messages in thread
From: Julius Tuskenis @ 2008-04-15 12:17 UTC (permalink / raw)
To: ; +Cc: pgsql-admin
Did you check the option "Inherits rights from parent roles" (parameter
INHERIT in SQL) for user testus ?
Dmitry Shubin rašė:
> Hallo to all! I use Postgres 8.1 and i've got problem in its
> usermanagement.
>
> Here is me roles list:
> nausd=# \du
> List of roles
> Role name | Superuser | Create role | Create DB | Connections | Member of
> -------------+-----------+-------------+-----------+-------------+--------------
> dss0 | yes | yes | yes | no limit |
> georgyd | no | no | no | no limit | {nausd_read}
> joe | no | no | no | no limit |
> nausd | no | no | no | no limit |
> nausd_read | no | no | no | no limit |
> postgres | yes | yes | yes | no limit |
> sagach_user | no | no | no | no limit |
> system | no | no | no | no limit |
> testgrp | no | no | no | no limit |
> testus | no | no | no | no limit | {testgrp}
> ttest | no | no | no | no limit |
> (11 rows)
>
> testus - user is a member of the testgrp
>
> Then I changed permission in table tbl_a_a_container from database nausd:
>
> nausd=# \z
> Access privileges for database "nausd"
> Schema | Name | Type | Access privileges
> --------+--------------------------------+----------+----------------------------------------------------------------
> public | tbl_a_a_container | table |
> {nausd=arwdRxt/nausd,nausd_read=r/nausd,testgrp=arwdRxt/nausd}
>
> So, we can see all rights for group testgrp and correspondingly for
> testus.
>
> But when I logging to databes nausd with user testus and try to select
> from tbl_a_a_container - I got error: permission denied for relation
> tbl_a_a_container
>
> What's wrong?
>
--
Julius Tuskenis
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2008-04-15 12:17 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2008-04-15 12:07 postgres 8.1 usermanagement problem Dmitry Shubin <dm.shubin@gmail.com>
2008-04-15 12:17 ` Julius Tuskenis <julius@nsoft.lt>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox