pg.ddx.io pgsql-sql@postgresql.org mailing list archive
help / color / mirror / Atom feedUser Permission
3+ messages / 3 participants
[nested] [flat]
* User Permission
@ 2006-07-19 11:24 sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
2006-07-19 14:42 ` Re: User Permission Aaron Bono <postgresql@aranya.com>
0 siblings, 1 reply; 3+ messages in thread
From: sathish kumar shanmugavelu @ 2006-07-19 11:24 UTC (permalink / raw)
To: pgsql-sql
Dear group,
i created a user named 'dataviewer' and grant only select permission to
that user,
but now the user could able to create tables. how to restrict this,
i want to give permission to create views and do selects on tables and
views.
how to do it?
plz help.
--
Sathish Kumar.S
SpireTEK
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: User Permission
2006-07-19 11:24 User Permission sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
@ 2006-07-19 14:42 ` Aaron Bono <postgresql@aranya.com>
2006-07-19 15:18 ` Re: User Permission Richard Broersma Jr <rabroersma@yahoo.com>
0 siblings, 1 reply; 3+ messages in thread
From: Aaron Bono @ 2006-07-19 14:42 UTC (permalink / raw)
To: sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>; +Cc: pgsql-sql
On 7/19/06, sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
wrote:
>
> Dear group,
> i created a user named 'dataviewer' and grant only select permission to
> that user,
> but now the user could able to create tables. how to restrict this,
> i want to give permission to create views and do selects on tables and
> views.
> how to do it?
> plz help.
>
Have your checked
http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html
I would start by creating a role:
http://www.postgresql.org/docs/8.1/interactive/user-manag.html
And revoke all on it. Then add only the permissions it needs and assign the
role to the user.
==================================================================
Aaron Bono
Aranya Software Technologies, Inc.
http://www.aranya.com
==================================================================
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: User Permission
2006-07-19 11:24 User Permission sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
2006-07-19 14:42 ` Re: User Permission Aaron Bono <postgresql@aranya.com>
@ 2006-07-19 15:18 ` Richard Broersma Jr <rabroersma@yahoo.com>
0 siblings, 0 replies; 3+ messages in thread
From: Richard Broersma Jr @ 2006-07-19 15:18 UTC (permalink / raw)
To: Aaron Bono <postgresql@aranya.com>; sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>; +Cc: pgsql-sql
> > Dear group,
> > i created a user named 'dataviewer' and grant only select permission to
> > that user,
> > but now the user could able to create tables. how to restrict this,
> > i want to give permission to create views and do selects on tables and
> > views.
> > how to do it?
> > plz help.
> Have your checked
> http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
> http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html
> I would start by creating a role:
> http://www.postgresql.org/docs/8.1/interactive/user-manag.html
> And revoke all on it. Then add only the permissions it needs and assign the
> role to the user.
Also, one additional point would be to revoke all from public as mentioned in the following
thread:
http://archives.postgresql.org/pgsql-general/2006-07/msg00148.php
Apparently, whatever privileges 'pubic' has are extended to the privileges of the individual
users.
Regards,
Richard Broersma Jr.
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2006-07-19 15:18 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2006-07-19 11:24 User Permission sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
2006-07-19 14:42 ` Aaron Bono <postgresql@aranya.com>
2006-07-19 15:18 ` Richard Broersma Jr <rabroersma@yahoo.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox