X-Original-To: pgsql-sql-postgresql.org@localhost.postgresql.org Received: from localhost (av.hub.org [200.46.204.144]) by svr1.postgresql.org (Postfix) with ESMTP id D50725288B for ; Thu, 18 Aug 2005 01:21:14 -0300 (ADT) Received: from svr1.postgresql.org ([200.46.204.71]) by localhost (av.hub.org [200.46.204.144]) (amavisd-new, port 10024) with ESMTP id 50640-02 for ; Thu, 18 Aug 2005 04:21:11 +0000 (GMT) Received: from sharp.noc24x7.com (unknown [69.56.128.138]) by svr1.postgresql.org (Postfix) with ESMTP id 85BBB528DE for ; Thu, 18 Aug 2005 01:21:06 -0300 (ADT) Received: from [61.3.110.136] (helo=thenilgiris.web) by sharp.noc24x7.com with esmtp (Exim 4.50) id 1E5btp-0001V9-IH for pgsql-sql@postgresql.org; Thu, 18 Aug 2005 09:51:06 +0530 Received: by thenilgiris.web (Postfix, from userid 500) id EEBAC5B983; Thu, 18 Aug 2005 09:51:03 +0530 (IST) From: Kenneth Gonsalves To: pgsql-sql@postgresql.org Subject: Re: How to secure PostgreSQL Data for distribute? Date: Thu, 18 Aug 2005 09:51:03 +0530 User-Agent: KMail/1.6.1 References: In-Reply-To: MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Message-Id: <200508180951.03451.lawgon@thenilgiris.com> X-Antivirus-Scanner: Clean mail though you should still use an Antivirus X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - sharp.noc24x7.com X-AntiAbuse: Original Domain - postgresql.org X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12] X-AntiAbuse: Sender Address Domain - thenilgiris.com X-Source: X-Source-Args: X-Source-Dir: X-Virus-Scanned: by amavisd-new at hub.org X-Spam-Status: No, hits=0.067 required=5 tests=[AWL=0.017, FORGED_RCVD_HELO=0.05] X-Spam-Level: X-Archive-Number: 200508/136 X-Sequence-Number: 22364 On Thursday 18 Aug 2005 8:26 am, Premsun Choltanwanich wrote: > Dear All, > > I need to distribute my application that use PostgreSQL as > database to my customer. But I still have some questions in my mind > on database security. I understand that everybody who get my > application database will be have a full control permission on my > database in case that PostgreSQL already installed on their > computer and they are an administrator on PostgreSQL. So that mean > data, structure and any ideas contain in database will does not > secure on this point. Is my understanding correct? correct > > What is the good way to make it all secure? Please advise. no way - you could try to frighten him so much that he is afraid to=20 touch anything. Or you could educate him so that he can creatively=20 touch some parts of it and ease your burden of support and=20 maintainence. Also enter into a proper license agreement with him so=20 that he doesnt redistribute or hijack your ideas and your code. In=20 the long run, if you follow this course, you will find that you will=20 be able to serve your customers more effectively =2D-=20 regards kg http://www.livejournal.com/users/lawgon tally ho! http://avsap.org.in =E0=B2=87=E0=B2=82=E0=B2=A1=E0=B3=8D=E0=B2=B2=E0=B2=BF=E0=B2=A8=E0=B2=95=E0= =B3=8D=E0=B2=B8 =E0=AE=B5=E0=AE=BE=E0=AE=B4=E0=AF=8D=E0=AE=95!