X-Original-To: pgsql-sql-postgresql.org@postgresql.org
Received: from localhost (mx1.hub.org [200.46.208.251])
	by postgresql.org (Postfix) with ESMTP id 6F9919FA4A7
	for <pgsql-sql-postgresql.org@postgresql.org>;
	Wed, 19 Jul 2006 11:42:46 -0300 (ADT)
Received: from postgresql.org ([200.46.204.71])
	by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024)
	with ESMTP id 15295-01 for <pgsql-sql-postgresql.org@postgresql.org>;
	Wed, 19 Jul 2006 11:42:41 -0300 (ADT)
X-Greylist: domain auto-whitelisted by SQLgrey-
Received: from nf-out-0910.google.com (nf-out-0910.google.com
 [64.233.182.188])
	by postgresql.org (Postfix) with ESMTP id 306D79FA47F
	for <pgsql-sql@postgresql.org>; Wed, 19 Jul 2006 11:42:40 -0300 (ADT)
Received: by nf-out-0910.google.com with SMTP id p77so199654nfc
	for <pgsql-sql@postgresql.org>; Wed, 19 Jul 2006 07:42:38 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:references:x-google-sender-auth;
	b=RlDVzbOtl4d60nVIK7BbFNRy98ciZd8fnKR+9XJAgXHAb7G4MRO21QFHWjdNGbziQ/1b9NXKfwWSZHlIVrB8sZmW5CjqcWX2KDNyw6kZenbp2adjbHEFOFSQ2WRRnXVq/PnN72T1d01GJvNJ23RnF2soc4lkWdSJ9zr7rlYspsY=
Received: by 10.78.178.5 with SMTP id a5mr388045huf;
	Wed, 19 Jul 2006 07:42:38 -0700 (PDT)
Received: by 10.78.32.10 with HTTP; Wed, 19 Jul 2006 07:42:38 -0700 (PDT)
Message-ID: <bf05e51c0607190742n77a2fc04q6540b51716082831@mail.gmail.com>
Date: Wed, 19 Jul 2006 09:42:38 -0500
From: "Aaron Bono" <postgresql@aranya.com>
To: "sathish kumar shanmugavelu" <sathishkumar.shanmugavelu@gmail.com>
Subject: Re: User Permission
Cc: pgsql-sql@postgresql.org
In-Reply-To: <ee0ad3a30607190424k482b2411q1db2715c5230a84d@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_44405_16367073.1153320158432"
References: <ee0ad3a30607190424k482b2411q1db2715c5230a84d@mail.gmail.com>
X-Google-Sender-Auth: b4ba17954b8548cf
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Archive-Number: 200607/252
X-Sequence-Number: 25826

------=_Part_44405_16367073.1153320158432
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 7/19/06, sathish kumar shanmugavelu <sathishkumar.shanmugavelu@gmail.com>
wrote:
>
> Dear group,
>    i created a user named 'dataviewer' and grant only select permission to
> that user,
>    but now the user could able to create tables. how to restrict this,
>    i want to give permission to create views and do selects on tables and
> views.
>    how to do it?
>    plz help.
>


Have your checked
http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html

I would start by creating a role:
http://www.postgresql.org/docs/8.1/interactive/user-manag.html

And revoke all on it.  Then add only the permissions it needs and assign the
role to the user.

==================================================================
   Aaron Bono
   Aranya Software Technologies, Inc.
   http://www.aranya.com
==================================================================

------=_Part_44405_16367073.1153320158432
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 7/19/06, <b class="gmail_sendername">sathish kumar shanmugavelu</b> &lt;<a href="mailto:sathishkumar.shanmugavelu@gmail.com">sathishkumar.shanmugavelu@gmail.com</a>&gt; wrote:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>Dear group,<br>&nbsp;&nbsp; i created a user named 'dataviewer' and grant only select permission to that user,<br>&nbsp;&nbsp; but now the user could able to create tables. how to restrict this,<br>&nbsp;&nbsp; i want to give permission to create views and do selects on tables and views.
<br>&nbsp;&nbsp; how to do it?<br>&nbsp;&nbsp; plz help.</div></blockquote><div><br>&nbsp;</div>Have your checked <br><a href="http://www.postgresql.org/docs/8.1/interactive/sql-grant.html">http://www.postgresql.org/docs/8.1/interactive/sql-grant.html
</a><br><a href="http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html">http://www.postgresql.org/docs/8.1/interactive/sql-revoke.html</a><br><br>I would start by creating a role:<br><a href="http://www.postgresql.org/docs/8.1/interactive/user-manag.html">
http://www.postgresql.org/docs/8.1/interactive/user-manag.html</a><br><br>And revoke all on it.&nbsp; Then add only the permissions it needs and assign the role to the user.<br></div><br>==================================================================
<br>&nbsp;&nbsp; Aaron Bono<br>&nbsp;&nbsp; Aranya Software Technologies, Inc.<br>&nbsp;&nbsp; <a href="http://www.aranya.com">http://www.aranya.com</a><br>==================================================================

------=_Part_44405_16367073.1153320158432--