X-Original-To: pgsql-interfaces-postgresql.org@localhost.postgresql.org Received: from localhost (unknown [200.46.204.144]) by svr1.postgresql.org (Postfix) with ESMTP id 8CD0956899 for ; Mon, 21 Mar 2005 21:17:23 +0000 (GMT) Received: from svr1.postgresql.org ([200.46.204.71]) by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024) with ESMTP id 67771-06 for ; Mon, 21 Mar 2005 21:17:18 +0000 (GMT) Received: from dydimus.dreamhost.com (dydimus.dreamhost.com [66.33.197.17]) by svr1.postgresql.org (Postfix) with ESMTP id 6EECA567FB for ; Mon, 21 Mar 2005 21:17:17 +0000 (GMT) Received: from 192.168.1.105 (pC19EB2B3.dip.t-dialin.net [193.158.178.179]) by dydimus.dreamhost.com (Postfix) with ESMTP id BFA744F898; Mon, 21 Mar 2005 13:17:16 -0800 (PST) Subject: Re: per-database groups? (was Discovering privileges) From: Murray Cumming To: Michael Fuhr Cc: pgsql-interfaces In-Reply-To: <20050321211339.GA43088@winnie.fuhr.org> References: <1088799354.3319.110.camel@murrayc_debian> <1111330231.5820.4.camel@localhost.localdomain> <20050320154247.GA18843@winnie.fuhr.org> <1111337130.5820.7.camel@localhost.localdomain> <20050320170228.GA19192@winnie.fuhr.org> <1111430281.5554.38.camel@localhost.localdomain> <20050321211339.GA43088@winnie.fuhr.org> Content-Type: text/plain Date: Mon, 21 Mar 2005 22:17:12 +0100 Message-Id: <1111439833.5554.61.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.0.2 (2.0.2-3) Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at hub.org X-Spam-Status: No, hits=0.05 tagged_above=0 required=5 tests=FORGED_RCVD_HELO X-Spam-Level: X-Archive-Number: 200503/67 X-Sequence-Number: 5396 On Mon, 2005-03-21 at 14:13 -0700, Michael Fuhr wrote: > On Mon, Mar 21, 2005 at 07:38:00PM +0100, Murray Cumming wrote: > > > I notice that users and groups are per-cluster rather than per-database. > > Is there any way to create users and groups that are not available to > > other databases on the same cluster? > > What do you mean by "available"? You can use pg_hba.conf to control > which users can connect to which databases, if that's what you're > after. Or maybe db_user_namespace will do what you want: > > http://www.postgresql.org/docs/8.0/interactive/runtime-config.html#GUC-DB-USER-NAMESPACE Thanks. That looks like what I want. -- Murray Cumming murrayc@murrayc.com www.murrayc.com www.openismus.com