pg.ddx.io pgsql-interfaces@postgresql.org mailing list archive
help / color / mirror / Atom feedper-database groups? (was Discovering privileges)
3+ messages / 2 participants
[nested] [flat]
* per-database groups? (was Discovering privileges)
@ 2005-03-21 18:38 Murray Cumming <murrayc@murrayc.com>
0 siblings, 1 reply; 3+ messages in thread
From: Murray Cumming @ 2005-03-21 18:38 UTC (permalink / raw)
To: pgsql-interfaces
On Sun, 2005-03-20 at 10:02 -0700, Michael Fuhr wrote:
> On Sun, Mar 20, 2005 at 05:45:29PM +0100, Murray Cumming wrote:
> > On Sun, 2005-03-20 at 08:42 -0700, Michael Fuhr wrote:
> > >
> > > You could look at pg_class.relacl,
> >
> > I can't make much sense of that so far. Ca you give any clues on how
> > that works?
>
> See "Notes" in the GRANT documentation:
>
> http://www.postgresql.org/docs/8.0/interactive/sql-grant.html
I notice that users and groups are per-cluster rather than per-database.
Is there any way to create users and groups that are not available to
other databases on the same cluster? I would expect databases to be
completely independent, regardless of whether they are available from
the same host and port.
This seems like it should be theoretically possible - after all, you can
not even connect to postgres unless you specify a database in the
connection.
--
Murray Cumming
murrayc@murrayc.com
www.murrayc.com
www.openismus.com
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: per-database groups? (was Discovering privileges)
@ 2005-03-21 21:13 Michael Fuhr <mike@fuhr.org>
parent: Murray Cumming <murrayc@murrayc.com>
0 siblings, 1 reply; 3+ messages in thread
From: Michael Fuhr @ 2005-03-21 21:13 UTC (permalink / raw)
To: Murray Cumming <murrayc@murrayc.com>; +Cc: pgsql-interfaces
On Mon, Mar 21, 2005 at 07:38:00PM +0100, Murray Cumming wrote:
> I notice that users and groups are per-cluster rather than per-database.
> Is there any way to create users and groups that are not available to
> other databases on the same cluster?
What do you mean by "available"? You can use pg_hba.conf to control
which users can connect to which databases, if that's what you're
after. Or maybe db_user_namespace will do what you want:
http://www.postgresql.org/docs/8.0/interactive/runtime-config.html#GUC-DB-USER-NAMESPACE
--
Michael Fuhr
http://www.fuhr.org/~mfuhr/
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: per-database groups? (was Discovering privileges)
@ 2005-03-21 21:17 Murray Cumming <murrayc@murrayc.com>
parent: Michael Fuhr <mike@fuhr.org>
0 siblings, 0 replies; 3+ messages in thread
From: Murray Cumming @ 2005-03-21 21:17 UTC (permalink / raw)
To: Michael Fuhr <mike@fuhr.org>; +Cc: pgsql-interfaces
On Mon, 2005-03-21 at 14:13 -0700, Michael Fuhr wrote:
> On Mon, Mar 21, 2005 at 07:38:00PM +0100, Murray Cumming wrote:
>
> > I notice that users and groups are per-cluster rather than per-database.
> > Is there any way to create users and groups that are not available to
> > other databases on the same cluster?
>
> What do you mean by "available"? You can use pg_hba.conf to control
> which users can connect to which databases, if that's what you're
> after. Or maybe db_user_namespace will do what you want:
>
> http://www.postgresql.org/docs/8.0/interactive/runtime-config.html#GUC-DB-USER-NAMESPACE
Thanks. That looks like what I want.
--
Murray Cumming
murrayc@murrayc.com
www.murrayc.com
www.openismus.com
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2005-03-21 21:17 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2005-03-21 18:38 per-database groups? (was Discovering privileges) Murray Cumming <murrayc@murrayc.com>
2005-03-21 21:13 ` Michael Fuhr <mike@fuhr.org>
2005-03-21 21:17 ` Murray Cumming <murrayc@murrayc.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox