Received: from makus.postgresql.org (makus.postgresql.org [98.129.198.125]) by mail.postgresql.org (Postfix) with ESMTP id ADB0D9552D4 for ; Tue, 28 Feb 2012 12:44:19 -0400 (AST) Received: from moutng.kundenserver.de ([212.227.126.171]) by makus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1S2Q9y-0007wb-PF for pgsql-admin@postgresql.org; Tue, 28 Feb 2012 16:44:19 +0000 Received: from [192.168.1.6] (mail.highperformancepostgresql.com [71.179.240.8]) by mrelayeu.kundenserver.de (node=mrbap4) with ESMTP (Nemesis) id 0MANKs-1S9cEg3Bfe-00Bho4; Tue, 28 Feb 2012 17:44:05 +0100 Message-ID: <4F4D0454.2090507@2ndQuadrant.com> Date: Tue, 28 Feb 2012 11:44:04 -0500 From: Greg Smith User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.24) Gecko/20111120 Icedove/3.1.16 MIME-Version: 1.0 To: pgsql-admin@postgresql.org, jan.sture.nielsen@gmail.com Subject: Re: Monitor without superuser? References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V02:K0:S3fJ6kc1CyXTZKDaOariG4CPgmWUY3HAz7lrj1tyM6B adErMgRsapIu6OkFS2Bxg4HevVfMbHJLNNAZcIKR52B/bhwlor X3LUW6OVKMdKKlPC/ih0FK9h1FDvtSQj20ajKBAhH4Eb5zSBkf iPOuv3Y/WNFopwolDu8wUhRTnV7pq0QF4/j/4fnTzkqGs0PeZT 9C09TIGuetpemxd9Rh4gV/Xdj0wVW8vxWfz2yZ/Lh9LzkcWPr9 D0BCkLJVCJlwLAOAeEE+7kNJK+/Cexc6Cqkie6d9BJ40PkKSBx i7/KQp2kIZ/DkwEVrCWaPpf0iusLR29wpqZ77106lbYVqvJhtU 2taKbqQvr2IG+jcvjbhQ= X-Pg-Spam-Score: -1.9 (-) X-Archive-Number: 201202/121 X-Sequence-Number: 39181 On 02/17/2012 10:37 AM, Jan Nielsen wrote: > I would like to create a role "dba_monitor" for a portion of my PG 9.1 > user-base to be able to monitor PG but without granting superuser. You want to create a security definer function for this: http://www.postgresql.org/docs/9.1/static/sql-createfunction.html -- Greg Smith 2ndQuadrant US greg@2ndQuadrant.com Baltimore, MD PostgreSQL Training, Services, and 24x7 Support www.2ndQuadrant.com