From: Richard Broersma Jr <rabroersma@yahoo.com>
To: Aaron Bono <postgresql@aranya.com>
To: sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
Cc: pgsql-sql@postgresql.org
Subject: Re: User Permission
Date: Wed, 19 Jul 2006 08:18:27 -0700 (PDT)
Message-ID: <20060719151827.19816.qmail@web31811.mail.mud.yahoo.com> (raw)
In-Reply-To: <bf05e51c0607190742n77a2fc04q6540b51716082831@mail.gmail.com>
> > Dear group,
> > i created a user named 'dataviewer' and grant only select permission to
> > that user,
> > but now the user could able to create tables. how to restrict this,
> > i want to give permission to create views and do selects on tables and
> > views.
> > how to do it?
> > plz help.
> Have your checked
> http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
> http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html
> I would start by creating a role:
> http://www.postgresql.org/docs/8.1/interactive/user-manag.html
> And revoke all on it. Then add only the permissions it needs and assign the
> role to the user.
Also, one additional point would be to revoke all from public as mentioned in the following
thread:
http://archives.postgresql.org/pgsql-general/2006-07/msg00148.php
Apparently, whatever privileges 'pubic' has are extended to the privileges of the individual
users.
Regards,
Richard Broersma Jr.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: rabroersma@yahoo.com, postgresql@aranya.com, sathishkumar.shanmugavelu@gmail.com
Subject: Re: User Permission
In-Reply-To: <20060719151827.19816.qmail@web31811.mail.mud.yahoo.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox