Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 55BE1650E91 for ; Fri, 27 Jun 2008 10:44:39 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 00159-08 for ; Fri, 27 Jun 2008 10:44:30 -0300 (ADT) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from n2d.bullet.mail.ac4.yahoo.com (n2d.bullet.mail.ac4.yahoo.com [76.13.13.86]) by postgresql.org (Postfix) with SMTP id 85FD3650E2E for ; Fri, 27 Jun 2008 10:44:35 -0300 (ADT) Received: from [76.13.13.26] by n2.bullet.mail.ac4.yahoo.com with NNFMP; 27 Jun 2008 05:36:59 -0000 Received: from [76.13.10.174] by t3.bullet.mail.ac4.yahoo.com with NNFMP; 27 Jun 2008 13:44:33 -0000 Received: from [127.0.0.1] by omp115.mail.ac4.yahoo.com with NNFMP; 27 Jun 2008 13:44:33 -0000 X-Yahoo-Newman-Property: ymail-5 X-Yahoo-Newman-Id: 816651.74870.bm@omp115.mail.ac4.yahoo.com Received: (qmail 24545 invoked by uid 60001); 27 Jun 2008 13:44:33 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Received:X-Mailer:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Message-ID; b=LRavymlgxEx1zFvX1nWe2AZAoTaSK6Q27vmcqiuY2oQvwEzev8DkwHxKK28Et617TEgDsxSqgBcPDgKLKbQ1NZsD/skWqdOjyExG08YgF+xWdXF8nAYQO/uan+0oujF+I/704htFaGpHl/iS/ZFd3r80uyjWh+QWPeOH4bdwWMk=; Received: from [209.88.228.11] by web59503.mail.ac4.yahoo.com via HTTP; Fri, 27 Jun 2008 06:44:33 PDT X-Mailer: YahooMailWebService/0.7.199 Date: Fri, 27 Jun 2008 06:44:33 -0700 (PDT) From: Lennin Caro Reply-To: lennin.caro@yahoo.com Subject: Re: Extended security/restriction to any role with login access To: Domingo Alvarez Duarte Cc: Carol Walter , pgsql-admin@postgresql.org In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1057996001-1214574273=:23897" Message-ID: <607359.23897.qm@web59503.mail.ac4.yahoo.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=2.189 tagged_above=0 required=5 tests=HTML_MESSAGE=0.001, RCVD_IN_BL_SPAMCOP_NET=2.188 X-Spam-Level: ** X-Archive-Number: 200806/230 X-Sequence-Number: 29568 --0-1057996001-1214574273=:23897 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable ok, let try this ..... open the pg_hba.conf and check the line=20 host=A0=A0=A0 all=A0=A0=A0=A0=A0=A0=A0=A0 all=A0=A0=A0=A0=A0=A0=A0=A0 127.0= ..0.1/32=A0=A0=A0=A0=A0=A0=A0=A0=A0 trust and change to=20 host=A0=A0=A0 all=A0=A0=A0=A0=A0=A0=A0=A0 all=A0=A0=A0=A0=A0=A0=A0=A0 127.0= ..0.1/32=A0=A0=A0=A0=A0=A0=A0=A0=A0 password --- On Thu, 6/26/08, Domingo Alvarez Duarte wrote: From: Domingo Alvarez Duarte Subject: Re: [ADMIN] Extended security/restriction to any role with login a= ccess To: lennin.caro@yahoo.com Cc: "Carol Walter" , pgsql-admin@postgresql.org Date: Thursday, June 26, 2008, 9:45 PM I did the following: -Connect as superuser postgres with pgadmin and create a user -> noaccess CREATE ROLE noaccess LOGIN =A0 NOSUPERUSER NOINHERIT NOCREATEDB NOCREATEROLE; -Disconnect from the server -Connect to the server with user 'noaccess' through pgadmin3, and I can see= all databases/functions/schemas/roles. What am I missing ? On Thu, Jun 26, 2008 at 8:44 PM, Lennin Caro wrote: hello... you can restric acces from all the databases in your cluster. When you use = pgadmin3 this show all the databases but if you dont have access to the dat= abases you cant see the struct of this. check waht user use pgadmin3 for connect to databases=20 create groups and add privileges to the group later add the users to the gr= oup =0A=0A=0A --0-1057996001-1214574273=:23897 Content-Type: text/html; charset=us-ascii
ok, let try this .....

open the pg_hba.conf and check the line

host    all         all         127.0.0.1/32          trust

and change to

host    all         all         127.0.0.1/32          password



--- On Thu, 6/26/08, Domingo Alvarez Duarte <mingodad@gmail.com> wrote:
From: Domingo Alvarez Duarte <mingodad@gmail.com>
Subject: Re: [ADMIN] Extended security/restriction to any role with login access
To: lennin.caro@yahoo.com
Cc: "Carol Walter" <walterc@indiana.edu>, pgsql-admin@postgresql.org
Date: Thursday, June 26, 2008, 9:45 PM

I did the following:
-Connect as superuser postgres with pgadmin and create a user -> noaccess
CREATE ROLE noaccess LOGIN
  NOSUPERUSER NOINHERIT NOCREATEDB NOCREATEROLE;

-Disconnect from the server
-Connect to the server with user 'noaccess' through pgadmin3, and I can see all databases/functions/schemas/roles.

What am I missing ?

On Thu, Jun 26, 2008 at 8:44 PM, Lennin Caro <lennin.caro@yahoo.com> wrote:
hello...

you can restric acces from all the databases in your cluster. When you use pgadmin3 this show all the databases but if you dont have access to the databases you cant see the struct of this.

check waht user use pgadmin3 for connect to databases

create groups and add privileges to the group later add the users to the group




--0-1057996001-1214574273=:23897--