Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id B20F364FD1E for ; Thu, 21 Aug 2008 06:01:03 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 44634-05-2 for ; Thu, 21 Aug 2008 06:00:42 -0300 (ADT) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from blu0-omc4-s20.blu0.hotmail.com (blu0-omc4-s20.blu0.hotmail.com [65.55.111.159]) by postgresql.org (Postfix) with ESMTP id 8DAA564FD31 for ; Thu, 21 Aug 2008 05:59:23 -0300 (ADT) Received: from BLU149-W43 ([65.55.111.137]) by blu0-omc4-s20.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 21 Aug 2008 01:59:21 -0700 Message-ID: Content-Type: multipart/alternative; boundary="_a483c201-49bb-4a27-85af-e346704807c1_" X-Originating-IP: [59.160.193.34] From: Vishal Arora To: Shashwat_Nigam CC: "pgsql-admin@postgresql.org" Subject: Re: Regarding access to a user Date: Thu, 21 Aug 2008 14:29:20 +0530 Importance: Normal In-Reply-To: References: <48ABD192.EE98.0025.0@wicourts.gov> MIME-Version: 1.0 X-OriginalArrivalTime: 21 Aug 2008 08:59:21.0200 (UTC) FILETIME=[337DBF00:01C9036C] X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0.001 tagged_above=0 required=5 tests=HTML_MESSAGE=0.001 X-Spam-Level: X-Archive-Number: 200808/99 X-Sequence-Number: 29944 --_a483c201-49bb-4a27-85af-e346704807c1_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable > From: Shashwat_Nigam@satyam.com> To: Kevin.Grittner@wicourts.gov> CC: pgs= ql-general@postgresql.org=3B pgsql-sql@postgresql.org=3B pgsql-admin@postgr= esql.org> Date: Thu=2C 21 Aug 2008 14:23:51 +0530> Subject: Re: [ADMIN] Reg= arding access to a user> > Dear Kevin> Thanks for the help. But still the u= ser is able to see all the databases. I defined something like this> > # IP= v4 local connections:> host all all 127.0.0.1/32 md5> host HMRI_database hm= ri 127.0.0.1/32 md5 You have to comment out the first entry made in your hba file. In this case= it checks for the first line where all users are allowed to access all dat= abases so it does not checks the second line. =20 > > in the above case hmri is user and HMRI_database. But still when user i= s log in as 'hmri' it is able to access all the databases.> Please provide = a solution for the same.> > Thanks & Regards=2C> Shashwat Nigam> | Software= Engineer | Geographical Information System> Satyam Computer Services Limit= ed=2C Hyderabad | MOBILE: +919951467324 |> > -----Original Message-----> Fr= om: Kevin Grittner [mailto:Kevin.Grittner@wicourts.gov]> Sent: Wednesday=2C= August 20=2C 2008 6:41 PM> To: pgsql-admin@postgresql.org=3B Shashwat_Niga= m> Cc: pgsql-general@postgresql.org=3B pgsql-sql@postgresql.org> Subject: R= e: [ADMIN] Regarding access to a user> > >>> Shashwat_Nigam wrote:> > > Now what I want is to set privilege that whenever = the user log in as> Us> > he can only see database Y=2C none other than tha= t. The user Us could> have all> > rights for database Y but can't go for an= y other database (X or Z).> > The first thing you need to do is configure "= host based> authentication":> > http://www.postgresql.org/docs/8.3/interact= ive/auth-pg-hba-conf.html> > Among other things=2C this allows you to restr= ict which users can> connect to which databases.> > -Kevin> > > DISCLAIMER:= > This email (including any attachments) is intended for the sole use of th= e intended recipient/s and may contain material that is CONFIDENTIAL AND PR= IVATE COMPANY INFORMATION. Any review or reliance by others or copying or d= istribution or forwarding of any or all of the contents in this message is = STRICTLY PROHIBITED. If you are not the intended recipient=2C please contac= t the sender by email and delete all copies=3B your cooperation in this reg= ard is appreciated.> > -- > Sent via pgsql-admin mailing list (pgsql-admin@= postgresql.org)> To make changes to your subscription:> http://www.postgres= ql.org/mailpref/pgsql-admin _________________________________________________________________ From salsa lessons to filmy gossip=2C news to music concerts - watch it all= on MSN Video http://video.msn.com/?mkt=3Den-in= --_a483c201-49bb-4a27-85af-e346704807c1_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable





>=3B From: Shashwat_Nigam@satyam.com
>=3B To: Kevin.Grittner@wicourt= s.gov
>=3B CC: pgsql-general@postgresql.org=3B pgsql-sql@postgresql.or= g=3B pgsql-admin@postgresql.org
>=3B Date: Thu=2C 21 Aug 2008 14:23:51= +0530
>=3B Subject: Re: [ADMIN] Regarding access to a user
>=3B =
>=3B Dear Kevin
>=3B Thanks for the help. But still the user is = able to see all the databases. I defined something like this
>=3B
= >=3B # IPv4 local connections:
>=3B host all all 127.0.0.1/32 md5>=3B host HMRI_database hmri 127.0.0.1/32 md5

You =3Bhave to comment out the first entry made in your hba file. In th= is case =3Bit checks for the first line where all users are allowed to = access all databases =3Bso it does not checks the second line.  =3B=

>=3B
>=3B in the above case hmri is user and HMRI_database. But= still when user is log in as 'hmri' it is able to access all the databases= .
>=3B Please provide a solution for the same.
>=3B
>=3B Th= anks &=3B Regards=2C
>=3B Shashwat Nigam
>=3B | Software Engin= eer | Geographical Information System
>=3B Satyam Computer Services Li= mited=2C Hyderabad | MOBILE: +919951467324 |
>=3B
>=3B -----Orig= inal Message-----
>=3B From: Kevin Grittner [mailto:Kevin.Grittner@wic= ourts.gov]
>=3B Sent: Wednesday=2C August 20=2C 2008 6:41 PM
>=3B= To: pgsql-admin@postgresql.org=3B Shashwat_Nigam
>=3B Cc: pgsql-gener= al@postgresql.org=3B pgsql-sql@postgresql.org
>=3B Subject: Re: [ADMIN= ] Regarding access to a user
>=3B
>=3B >=3B>=3B>=3B Shashw= at_Nigam <=3BShashwat_Nigam@satyam.com>=3B wrote:
>=3B
>=3B = >=3B Now what I want is to set privilege that whenever the user log in as=
>=3B Us
>=3B >=3B he can only see database Y=2C none other tha= n that. The user Us could
>=3B have all
>=3B >=3B rights for da= tabase Y but can't go for any other database (X or Z).
>=3B
>=3B= The first thing you need to do is configure "host based
>=3B authenti= cation":
>=3B
>=3B http://www.postgresql.org/docs/8.3/interactiv= e/auth-pg-hba-conf.html
>=3B
>=3B Among other things=2C this all= ows you to restrict which users can
>=3B connect to which databases.>=3B
>=3B -Kevin
>=3B
>=3B
>=3B DISCLAIMER:
&= gt=3B This email (including any attachments) is intended for the sole use o= f the intended recipient/s and may contain material that is CONFIDENTIAL AN= D PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying = or distribution or forwarding of any or all of the contents in this message= is STRICTLY PROHIBITED. If you are not the intended recipient=2C please co= ntact the sender by email and delete all copies=3B your cooperation in this= regard is appreciated.
>=3B
>=3B --
>=3B Sent via pgsql-a= dmin mailing list (pgsql-admin@postgresql.org)
>=3B To make changes to= your subscription:
>=3B http://www.postgresql.org/mailpref/pgsql-admi= n


Search for videos of Bollywood=2C Hollywood=2C Mollywo= od and every other wood=2C only on Live.com Try it now! = --_a483c201-49bb-4a27-85af-e346704807c1_--