From: Dinesh Bhandary <dbhandary@iii.com>
To: pgsql-admin@postgresql.org
Subject: Re: hiding metadata information from a user
Date: Thu, 10 Mar 2011 09:36:15 -0800
Message-ID: <4D790C0F.3080100@iii.com> (raw)
In-Reply-To: <4D781A21.8030109@iii.com>
References: <4D781A21.8030109@iii.com>
It is a follow up to my first question. I am still interested in knowing
if we can create a pure read only user in postgres, which has no access
to system catalogs.
The alternative I am thinking is using a separate instance and use
dblink or replication tool to refresh data. Do you know if we can hide
connection details from a user if we use dblink? I just want to make
sure this read only
user does not go and query our system catalogs in production server.
Dblink should be easier to implement than using replication tool.
Thanks.
Dinesh
On 3/9/2011 4:24 PM, Dinesh Bhandary wrote:
> Hi All -
>
> Please let me know if this is possible to do in postgres.
>
> I am creating a read only user, which has limited access to db
> objects, primarily views. Even though this user can't query data from
> other db objects it can view the system catalog using pg* views and
> tables, thereby exposing our logical schema.
> Is there a way in postgres to limit access to system catalogs. I just
> want a pure read only user, which can do nothing but query specific
> views we outlined.
>
> Thanks!
> Dinesh
>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: dbhandary@iii.com
Subject: Re: hiding metadata information from a user
In-Reply-To: <4D790C0F.3080100@iii.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox