pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Greg Smith <greg@2ndQuadrant.com>
To: pgsql-admin@postgresql.org
To: jan.sture.nielsen@gmail.com
Subject: Re: Monitor without superuser?
Date: Tue, 28 Feb 2012 11:44:04 -0500
Message-ID: <4F4D0454.2090507@2ndQuadrant.com> (raw)
In-Reply-To: <CANxH4hH_nJ4TkhNpUx6SeP=41WU5APvfbioY8CEr-NYLHCbnLQ@mail.gmail.com>
References: <CANxH4hH_nJ4TkhNpUx6SeP=41WU5APvfbioY8CEr-NYLHCbnLQ@mail.gmail.com>

On 02/17/2012 10:37 AM, Jan Nielsen wrote:
> I would like to create a role "dba_monitor" for a portion of my PG 9.1
> user-base to be able to monitor PG but without granting superuser.

You want to create a security definer function for this: 
http://www.postgresql.org/docs/9.1/static/sql-createfunction.html

-- 
Greg Smith   2ndQuadrant US    greg@2ndQuadrant.com   Baltimore, MD
PostgreSQL Training, Services, and 24x7 Support www.2ndQuadrant.com



view thread (2+ messages)

Message-ID: <4F4D0454.2090507@2ndQuadrant.com>
Permalink:  ../4F4D0454.2090507@2ndQuadrant.com/
Also on:    postgresql.org/message-id/4F4D0454.2090507@2ndQuadrant.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: greg@2ndQuadrant.com, jan.sture.nielsen@gmail.com
  Subject: Re: Monitor without superuser?
  In-Reply-To: <4F4D0454.2090507@2ndQuadrant.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox