pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: apagador <apagador@ntsp.nec.co.jp>
To: pgsql-admin@postgresql.org
Subject: Hide users not created by a user
Date: Thu, 06 Jun 2013 16:37:28 +0800
Message-ID: <51B04A48.5000708@ntsp.nec.co.jp> (raw)
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>

Hello all,

For a multi-tenant database system, it is assumed that only databases 
and users
created by a certain tenant should be accessible/viewable to him.

 From what I read, postgresql stores database and user information in 
catalogs that
are accessible to public.

Here is a scenario:

Let's say Tenant A created a database and a set of users, and Tenant B also
does the same in the same postgresql instance.

Can postgresql limit the access/view to only those databases and users 
that Tenant A
created?

Any idea on how this could be done?

Thanks and best regards.



-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin



Message-ID: <51B04A48.5000708@ntsp.nec.co.jp>
Permalink:  ../51B04A48.5000708@ntsp.nec.co.jp/
Also on:    postgresql.org/message-id/51B04A48.5000708@ntsp.nec.co.jp

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: apagador@ntsp.nec.co.jp
  Subject: Re: Hide users not created by a user
  In-Reply-To: <51B04A48.5000708@ntsp.nec.co.jp>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox