pg.ddx.io  pgsql-sql@postgresql.org mailing list archive  
help / color / mirror / Atom feed
User Permission
3+ messages / 3 participants
[nested] [flat]

* User Permission
@ 2006-07-19 11:24  sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
  0 siblings, 1 reply; 3+ messages in thread

From: sathish kumar shanmugavelu @ 2006-07-19 11:24 UTC (permalink / raw)
  To: pgsql-sql

Dear group,
   i created a user named 'dataviewer' and grant only select permission to
that user,
   but now the user could able to create tables. how to restrict this,
   i want to give permission to create views and do selects on tables and
views.
   how to do it?
   plz help.

-- 
Sathish Kumar.S
SpireTEK

^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: User Permission
@ 2006-07-19 14:42  Aaron Bono <postgresql@aranya.com>
  parent: sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
  0 siblings, 1 reply; 3+ messages in thread

From: Aaron Bono @ 2006-07-19 14:42 UTC (permalink / raw)
  To: sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>; +Cc: pgsql-sql

On 7/19/06, sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
wrote:
>
> Dear group,
>    i created a user named 'dataviewer' and grant only select permission to
> that user,
>    but now the user could able to create tables. how to restrict this,
>    i want to give permission to create views and do selects on tables and
> views.
>    how to do it?
>    plz help.
>


Have your checked
http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html

I would start by creating a role:
http://www.postgresql.org/docs/8.1/interactive/user-manag.html

And revoke all on it.  Then add only the permissions it needs and assign the
role to the user.

==================================================================
   Aaron Bono
   Aranya Software Technologies, Inc.
   http://www.aranya.com
==================================================================

^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: User Permission
@ 2006-07-19 15:18  Richard Broersma Jr <rabroersma@yahoo.com>
  parent: Aaron Bono <postgresql@aranya.com>
  0 siblings, 0 replies; 3+ messages in thread

From: Richard Broersma Jr @ 2006-07-19 15:18 UTC (permalink / raw)
  To: Aaron Bono <postgresql@aranya.com>; sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>; +Cc: pgsql-sql


> > Dear group,
> >    i created a user named 'dataviewer' and grant only select permission to
> > that user,
> >    but now the user could able to create tables. how to restrict this,
> >    i want to give permission to create views and do selects on tables and
> > views.
> >    how to do it?
> >    plz help.
> Have your checked
> http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
> http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html
> I would start by creating a role:
> http://www.postgresql.org/docs/8.1/interactive/user-manag.html
> And revoke all on it.  Then add only the permissions it needs and assign the
> role to the user.

Also, one additional point would be to revoke all from public as mentioned in the following
thread:
http://archives.postgresql.org/pgsql-general/2006-07/msg00148.php

Apparently, whatever privileges 'pubic' has are extended to the privileges of the individual
users.

Regards,

Richard Broersma Jr.



^ permalink  raw  reply  [nested|flat] 3+ messages in thread


end of thread, other threads:[~2006-07-19 15:18 UTC | newest]

Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2006-07-19 11:24 User Permission sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
2006-07-19 14:42 ` Aaron Bono <postgresql@aranya.com>
2006-07-19 15:18   ` Richard Broersma Jr <rabroersma@yahoo.com>

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox