MIME-Version: 1.0
In-Reply-To: 
 <CA+wokJ8-z3sXJbrWHoxEVa2dV2Qsp2OyqyzdJBa3rvhWOEyXOg@mail.gmail.com>
References: 
 <CA+wokJ8-z3sXJbrWHoxEVa2dV2Qsp2OyqyzdJBa3rvhWOEyXOg@mail.gmail.com>
From: "David G. Johnston" <david.g.johnston@gmail.com>
Date: Sun, 9 Jun 2024 17:27:16 -0700
Message-ID: 
 <CAKFQuwaJM51pW5a6HfarX1M-sH1bokX3KYRamKB5yCJdt3mFFw@mail.gmail.com>
Subject: Re: GRANT CONNECT ON DATABASE
To: Edwin UY <edwin.uy@gmail.com>
Cc: "pgsql-admin@lists.postgresql.org" <pgsql-admin@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="0000000000002d5697061a7e3626"
Archived-At: 
 <https://www.postgresql.org/message-id/CAKFQuwaJM51pW5a6HfarX1M-sH1bokX3KYRamKB5yCJdt3mFFw%40mail.gmail.com>
Precedence: bulk

--0000000000002d5697061a7e3626
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sunday, June 9, 2024, Edwin UY <edwin.uy@gmail.com> wrote:
>
>
> A role was created as below:
> CREATE ROLE [blah] WITH NOLOGIN
>
>
As already noted this means =E2=80=9Cdo not allow to login=E2=80=9D.

ALTER ROLE [blah] WITH ENCRYPTED PASSWORD 'blahpassword' ;
>

If you want them to use a password this is also required in addition to the
ability to login.


> GRANT CONNECT ON DATABASE [blahdb] TO [blahuser] ;
>

Redundant with the default connect grant given to the public pseudo-role.

David J.

--0000000000002d5697061a7e3626
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sunday, June 9, 2024, Edwin UY &lt;<a href=3D"mailto:edwin.uy@gmail.com"=
>edwin.uy@gmail.com</a>&gt; wrote:<blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=
=3D"ltr"><div><br></div><div>
A role was created as below:</div><div>CREATE ROLE [blah] WITH NOLOGIN</div=
><div><br></div></div></blockquote><div><br></div><div>As already noted thi=
s means =E2=80=9Cdo not allow to login=E2=80=9D.</div><div><br></div><block=
quote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc=
 solid;padding-left:1ex"><div dir=3D"ltr"><div>ALTER ROLE [blah] WITH ENCRY=
PTED PASSWORD &#39;blahpassword&#39; ;<br></div></div></blockquote><div><br=
></div><div>If you want them to use a password this is also required in add=
ition to the ability to login.</div><div>=C2=A0</div><blockquote class=3D"g=
mail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-l=
eft:1ex"><div dir=3D"ltr"><div><div></div>

GRANT CONNECT ON DATABASE [blahdb] TO [blahuser] ;</div></div></blockquote>=
<div><br></div><div>Redundant with the default connect grant given to the p=
ublic pseudo-role.</div><div><br></div><div>David J.</div><div><br></div>

--0000000000002d5697061a7e3626--