From: Ondřej Světlík <osvetlik@flexibee.eu>
To: pgsql-admin@postgresql.org
Subject: Re: Revoke delete on a table for super user
Date: Tue, 2 Aug 2016 22:27:43 +0200
Message-ID: <997e138a-f05d-4f30-3bcc-85459ef7c898@flexibee.eu> (raw)
In-Reply-To: <18971.1470158828@sss.pgh.pa.us>
References: <B75CD08C73BD3543B97E4EF3964B7D70307769B3@CITESMBX1.ad.uillinois.edu>
<18971.1470158828@sss.pgh.pa.us>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Dne 2.8.2016 v 19:27 Tom Lane napsal(a):
> "Campbell, Lance" <lance@illinois.edu> writes:
>> Is there a way to revoke the ability to perform delete on a table for a user that is a super user?
>
> No. Superusers bypass all access controls, by definition. Your best bet
> is to not do more than you absolutely must as a superuser.
>
> regards, tom lane
>
>
I guess you could achieve this using a trigger.
Regards,
Ondřej
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: osvetlik@flexibee.eu
Subject: Re: Revoke delete on a table for super user
In-Reply-To: <997e138a-f05d-4f30-3bcc-85459ef7c898@flexibee.eu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox