From: Stephen Frost <sfrost@snowman.net>
To: Andrew Hall <andrewah@hotmail.com>
Cc: PostgreSQL Mailing List <pgsql-sql@postgresql.org>
Subject: Re: PostgreSQL Security/Roles/Grants
Date: Sun, 1 Nov 2009 14:09:59 -0500
Message-ID: <20091101190959.GD17756@tamriel.snowman.net> (raw)
In-Reply-To: <COL122-W3402F3A4C1F2DF3A50ECC5CDB40@phx.gbl>
References: <COL122-W3402F3A4C1F2DF3A50ECC5CDB40@phx.gbl>
Andrew,
* Andrew Hall (andrewah@hotmail.com) wrote:
> 2. Non-default role -> a role which has to be explicitly activated during the lifecycle of an application in order to gain access to database resources. There are no limits on the number of non-default roles. This type of role helps us to only provide a user with the minimal set of privileges that they require at any given time, and minimise their access to database resources.
>
> I have looked through the PostgreSQL documentation, and cannot find anything analogous to the 'non-default role' which I have outlined above - although obviously it does support roles.
>
> I just want to confirm that all roles in postgreSQL are activated at login time?
No. You need to read the documentation on the 'noinherit' attribute of
roles.
See:
http://www.postgresql.org/docs/8.4/static/role-membership.html> Secondly, is there a limit on the number of roles which can be assigned to a user (or more accurately a 'login role') in postgreSQL?
No.
Thanks,
Stephen
Attachments:
signature.asc (application/pgp-signature, 196B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: sfrost@snowman.net, andrewah@hotmail.com
Subject: Re: PostgreSQL Security/Roles/Grants
In-Reply-To: <20091101190959.GD17756@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox