DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=suSOCFQ/KpmcKMTBSchTUDNUqj6bwM/mOyINjkqyj4BJLSGh93q97Xy2XVQ1jdbU3Jw1rHhjCFfQjP3u0cRiD9mstkuPK1YskxZmQyfZLMDtL1ygKZiCPtqrQ8Fwn7FzXpPvBwj+rKFWdKQUi/PRBJvjDEMA+G3IJpZlshEriCc=
Message-ID: <fb73c1ee05081720323b36c7b1@mail.gmail.com>
Date: Wed, 17 Aug 2005 23:32:21 -0400
From: Pascual De Ruvo <deruvo@gmail.com>
To: Premsun Choltanwanich <Premsun@nsasia.co.th>
Subject: Re: How to secure PostgreSQL Data for distribute?
Cc: pgsql-sql@postgresql.org
In-Reply-To: <s3045b5b.070@mail.nsasia.co.th>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <s3045b5b.070@mail.nsasia.co.th>

On 8/17/05, Premsun Choltanwanich <Premsun@nsasia.co.th> wrote:
> =20
> Dear All,=20
>  =20
>      I need to distribute my application that use PostgreSQL as database =
to
> my customer. But I still have some questions in my mind on database
> security. I understand that everybody  who get my application database wi=
ll
> be have a full control permission on my database in case that PostgreSQL
> already installed on their computer and they are an administrator on
> PostgreSQL. So that mean data, structure and any ideas contain in databas=
e
> will does not secure on this point. Is my understanding correct?=20
>  =20
>      What is the good way to make it all secure? Please advise.=20

If your customer has the root password of the machine that is running
postgresql, there's nothing you can do in order to limit the access to
the database structure.

My recommendation is: show them the code, make it free!