Message-ID: <4F60C64D.2090907@vianet.ca>
Date: Wed, 14 Mar 2012 12:24:45 -0400
From: Kris Deugau <kdeugau@vianet.ca>
Organization: ViaNet Internet Solutions
User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64;
	rv:6.0.1) Gecko/20110830 Firefox/6.0.1 SeaMonkey/2.3.1
MIME-Version: 1.0
To: pgsql-admin@postgresql.org
Subject: Re: Update actions (with user name) inside PostgreSQL DB
	- any version on postgreSQL
References: <8ecc4155e8754edef35e260a60a4a8db@mail.gmail.com>
	<1331722455.5503.166.camel@elliot>
	<bb7ee57f0e57557867afaf2033816241@mail.gmail.com>
	<1331730203.5503.174.camel@elliot>
	<CAPVc05NYyTM+fzo+phRBU0W26qdc+Ora5GJ6yui47q5sxocYLw@mail.gmail.com>
	<2CA18772-AF64-4147-8825-3E8DB98458AD@elevated-dev.com>
In-Reply-To: <2CA18772-AF64-4147-8825-3E8DB98458AD@elevated-dev.com>
Mail-Followup-To: pgsql-admin@postgresql.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Scott Ribe wrote:
> On Mar 14, 2012, at 9:01 AM, David Ondrejik wrote:
>
>> In Linux you can setup and use the "sudo" option. For those whom you don't wish to have root access, simply make them sudousers, then change the root password. This will force those users to simply type "sudo" (w/o quotes) at the beginning of each command they want to run (i.e. sudo psql db_name "insert into....").
>
> Sure, you mean like this command:
>
> sudo su root

If properly (mis)configured.

On the other hand, you can provide very limited root access on a 
command-by-command and user-by-user basis with more complex sudo 
configurations, and while the first request will ask for a password, 
further requests within the configured authorization timeout will still 
be logged even if the user isn't asked for their password.

-kgd