Re: [HACKERS] Re: [QUESTIONS] How is PostgreSQL doing?

From: Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us>
To: martin(at)biochemistry(dot)ucl(dot)ac(dot)uk
Cc: hackers(at)postgreSQL(dot)org
Subject: Re: [HACKERS] Re: [QUESTIONS] How is PostgreSQL doing?
Date: 1998-01-26 15:08:07
Message-ID: 199801261508.KAA00335@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

>
> > I found this patch in my mailbox. Is there any intestest in this, or is
> > it too site-specific?
> >
> > >
> > > Eze Ogwuma writes:
> > > > Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us> writes:
> > > > > Can you be specific? Something I can add to the TODO list.
> > > >
> > > > Database based access for users so that each user can be giving access
> > > > to a particular database only. More permissions for each databse user:
> > > > Create, Drop, Select, Insert etc. Possibly table based
> > > > authentification as well.
> > >
> > > I needed to do that for the web database that I'm setting up. We have
> > > 20000 users and each (potentially) needs a separate database which is
> > > only accessible to them. Rather than having 20000 lines in pg_hba.conf,
> > > I've patched Postgres so that the special token "%username" in the
> > > database field of pg_hba.conf allows access only to the username which
> > > is connecting. (I chose the leading "%" so that it couldn't clash with
> > > a real database name.) Since the patch is against 6.1 rather than
> > > 6.2beta, I hadn't made it public. Here it is in case it's of interest.
> > >
>
> Yes please! I'd like to see this...

I think it may already be there, but with no documentation in
pg_hba.conf:

See backend/libpq/hba.c:

Special case: For usermap "sameuser", don't look in the usermap
file. That's an implied map where "pguser" must be identical to
"ident_username" in order to be authorized.

--
Bruce Momjian
maillist(at)candle(dot)pha(dot)pa(dot)us

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Darren King 1998-01-26 15:36:04 Re: [HACKERS] Group By, NULL values and inconsistent behaviour.
Previous Message Zeugswetter Andreas DBT 1998-01-26 13:15:58 Re: [HACKERS] A small type extension example for the contrib dire ctory (fwd)