Received: from localhost (maia-5.hub.org [200.46.204.182]) by postgresql.org (Postfix) with ESMTP id 396149F9F66 for ; Mon, 2 Apr 2007 11:42:49 -0300 (ADT) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.182]) (amavisd-maia, port 10024) with ESMTP id 31880-01-3 for ; Mon, 2 Apr 2007 11:42:36 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.4 Received: from mail.net-domino.com (www.net-domino.com [74.208.11.96]) by postgresql.org (Postfix) with ESMTP id 061C59FA13B for ; Mon, 2 Apr 2007 11:42:42 -0300 (ADT) Received: from [127.0.0.1] (u15245314.onlinehome-server.com [74.208.11.96]) by mail.net-domino.com (8.13.7/8.13.6) with ESMTP id l32EgLtf027523; Mon, 2 Apr 2007 10:42:26 -0400 Message-ID: <46111645.2050505@mochima.com> Date: Mon, 02 Apr 2007 10:42:13 -0400 From: Carlos Moreno User-Agent: Thunderbird 1.5.0.10 (X11/20070301) MIME-Version: 1.0 To: ramachandra.bhaskaram@wipro.com CC: pgsql-performance@postgresql.org Subject: Re: Providing user based previleges to Postgres DB References: <20070402081739.696D19FB609@postgresql.org> <20070402074519.GC1382@andi-lap.la.revver.com> <47230CE166B64744B0120173E4C2161EED84AC@BLR-EC-MBX01.wipro.com> In-Reply-To: <47230CE166B64744B0120173E4C2161EED84AC@BLR-EC-MBX01.wipro.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Added-Header: Sample_milter accepted message X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200704/11 X-Sequence-Number: 23888 ramachandra.bhaskaram@wipro.com wrote: > > Hi All, > > Currently in one of the projects we want to restrict the > unauthorized users to the Postgres DB. Here we are using Postgres > version 8.2.0 > > Can anybody tell me how can I provide the user based previleges > to the Postgres DB so that, we can restrict the unauthorized users as > well as porivde the access control to the users based on the set > previleges by the administrator. > The pgsql-general list might be more appropriate for this type of question... Still: Are you talking restrictions based on database-users ? If so, look up grant and revoke in the PG documentation (under SQL commands). If you're talking about restricting system-users to even attempt to use psql (which really, would not be much of a restriction), then perhaps you would have to assign a group-owner to the file psql and grant execute permission to the group only (well, and owner). HTH, Carlos --