Received: from localhost (unknown [200.46.204.183])
	by postgresql.org (Postfix) with ESMTP id 463BC650E99
	for <pgsql-admin-postgresql.org@postgresql.org>;
	Thu, 26 Jun 2008 18:45:26 -0300 (ADT)
Received: from postgresql.org ([200.46.204.86])
	by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024)
	with ESMTP id 11911-06 for <pgsql-admin-postgresql.org@postgresql.org>;
	Thu, 26 Jun 2008 18:45:18 -0300 (ADT)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from hs-out-0708.google.com (hs-out-0708.google.com
 [64.233.178.243])
	by postgresql.org (Postfix) with ESMTP id 8F87A650EBE
	for <pgsql-admin@postgresql.org>; Thu, 26 Jun 2008 18:45:20 -0300 (ADT)
Received: by hs-out-0708.google.com with SMTP id x43so154210hsb.3
	for <pgsql-admin@postgresql.org>; Thu, 26 Jun 2008 14:45:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to
	:subject:cc:in-reply-to:mime-version:content-type:references;
	bh=6cD4k+8GvZiBH9H0PXfHC7PfIvIVDKMI0Y90Mf5lFIY=;
	b=U8jcdLt8/MExTyYSRLZMyEzVwbNBHsv531yHDSCTfCQoUBHE+Kipa9ek9KejcbGF97
	hIUcjd98B2X09Z/lbNU1K/RjJRCe3Af0HBxSspGn2vMFKPWLIQzVSlIMvhQ4NAgvjJQB
	7FelzgYSpNYkvGIlxv0hyEU+OyZjInYK3Okd8=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:cc:in-reply-to:mime-version
	:content-type:references;
	b=EJda/Zg12L/kY/lOWdu+uF3DQdgwp4jd0NRVIAg+/Bg2tRHL+9wYUJyfPKeG1XMn00
	TvPvHuRXpbqishUWgsDoJ5gwUFEAvff1EXmqYfc9PgeEQqgG7VB/FaYC4jtcbmLD2ZKA
	RQ+xncD1WncNpqmT6stkl+L8Mm2LkTdRMx26k=
Received: by 10.100.131.3 with SMTP id e3mr770070and.4.1214516719856;
	Thu, 26 Jun 2008 14:45:19 -0700 (PDT)
Received: by 10.101.66.6 with HTTP; Thu, 26 Jun 2008 14:45:19 -0700 (PDT)
Message-ID: <c2f38c3e0806261445q5f36a2d7j2172b7f19a75b42b@mail.gmail.com>
Date: Thu, 26 Jun 2008 23:45:19 +0200
From: "Domingo Alvarez Duarte" <mingodad@gmail.com>
To: lennin.caro@yahoo.com
Subject: Re: Extended security/restriction to any role with login access
Cc: "Carol Walter" <walterc@indiana.edu>, pgsql-admin@postgresql.org
In-Reply-To: <58023.50557.qm@web59504.mail.ac4.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_17748_1639740.1214516719862"
References: <2D85373C-758F-4545-BE65-22A5E5A4B3A8@indiana.edu>
	<58023.50557.qm@web59504.mail.ac4.yahoo.com>
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=0.001 tagged_above=0 required=5
	tests=HTML_MESSAGE=0.001
X-Spam-Level: 
X-Archive-Number: 200806/233
X-Sequence-Number: 29571

------=_Part_17748_1639740.1214516719862
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I did the following:
-Connect as superuser postgres with pgadmin and create a user -> noaccess
CREATE ROLE noaccess LOGIN
  NOSUPERUSER NOINHERIT NOCREATEDB NOCREATEROLE;

-Disconnect from the server
-Connect to the server with user 'noaccess' through pgadmin3, and I can see
all databases/functions/schemas/roles.

What am I missing ?

On Thu, Jun 26, 2008 at 8:44 PM, Lennin Caro <lennin.caro@yahoo.com> wrote:

> hello...
>
> you can restric acces from all the databases in your cluster. When you use
> pgadmin3 this show all the databases but if you dont have access to the
> databases you cant see the struct of this.
>
> check waht user use pgadmin3 for connect to databases
>
> create groups and add privileges to the group later add the users to the
> group
>
>
>

------=_Part_17748_1639740.1214516719862
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I did the following:<br>-Connect as superuser postgres with pgadmin and create a user -&gt; noaccess<br>CREATE ROLE noaccess LOGIN<br>&nbsp; NOSUPERUSER NOINHERIT NOCREATEDB NOCREATEROLE;<br><br>-Disconnect from the server<br>-Connect to the server with user &#39;noaccess&#39; through pgadmin3, and I can see all databases/functions/schemas/roles.<br>
<br>What am I missing ?<br><br><div class="gmail_quote">On Thu, Jun 26, 2008 at 8:44 PM, Lennin Caro &lt;<a href="mailto:lennin.caro@yahoo.com">lennin.caro@yahoo.com</a>&gt; wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;" valign="top">
hello...<br><br>you can restric acces from all the databases in your cluster. When you use pgadmin3 this show all the databases but if you dont have access to the databases you cant see the struct of this.<br><br>check waht user use pgadmin3 for connect to databases <br>
<br>create groups and add privileges to the group later add the users to the group<br><br><br></td></tr></tbody></table></blockquote></div><br>

------=_Part_17748_1639740.1214516719862--