From: Kris Deugau <kdeugau@vianet.ca>
To: pgsql-admin@postgresql.org
Subject: Re: Update actions (with user name) inside PostgreSQL DB - any version on postgreSQL
Date: Wed, 14 Mar 2012 12:24:45 -0400
Message-ID: <4F60C64D.2090907@vianet.ca> (raw)
In-Reply-To: <2CA18772-AF64-4147-8825-3E8DB98458AD@elevated-dev.com>
References: <8ecc4155e8754edef35e260a60a4a8db@mail.gmail.com>
<1331722455.5503.166.camel@elliot>
<bb7ee57f0e57557867afaf2033816241@mail.gmail.com>
<1331730203.5503.174.camel@elliot>
<CAPVc05NYyTM+fzo+phRBU0W26qdc+Ora5GJ6yui47q5sxocYLw@mail.gmail.com>
<2CA18772-AF64-4147-8825-3E8DB98458AD@elevated-dev.com>
Scott Ribe wrote:
> On Mar 14, 2012, at 9:01 AM, David Ondrejik wrote:
>
>> In Linux you can setup and use the "sudo" option. For those whom you don't wish to have root access, simply make them sudousers, then change the root password. This will force those users to simply type "sudo" (w/o quotes) at the beginning of each command they want to run (i.e. sudo psql db_name "insert into....").
>
> Sure, you mean like this command:
>
> sudo su root
If properly (mis)configured.
On the other hand, you can provide very limited root access on a
command-by-command and user-by-user basis with more complex sudo
configurations, and while the first request will ask for a password,
further requests within the configured authorization timeout will still
be logged even if the user isn't asked for their password.
-kgd
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: kdeugau@vianet.ca
Subject: Re: Update actions (with user name) inside PostgreSQL DB - any version on postgreSQL
In-Reply-To: <4F60C64D.2090907@vianet.ca>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox