Re: User Privileges using dblink

From: Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl>
To: Kreißl, Karsten <KREISSL(at)his(dot)de>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-general(at)postgresql(dot)org
Subject: Re: User Privileges using dblink
Date: 2004-06-23 14:45:11
Message-ID: 20040623144511.GB2767@dcc.uchile.cl
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Wed, Jun 23, 2004 at 09:03:37AM +0200, "Kreißl, Karsten" wrote:

> But, under this conditions we must specify username and password
> (without encryption!) in the view definition. Every user can read
> this information using pgadmin or other tools. It's very simple ! In
> our environment the remote DB knows the same users as our local DB. So
> we are always searching for a solution, without publishing username
> and password. Our background is a migration from INFORMIX DB to
> PostgreSQL. Using INFORMIX there is a rather simple solution for this
> problem, called Synonyms.

Personally, I think it's a very bad idea to use a different database for
this kind of data exchange. I'd go with using different schemas.
There's a lot more fine grained control on access privileges, and users
won't be able to see any password; also, the performance should be much
better.

--
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
"El número de instalaciones de UNIX se ha elevado a 10,
y se espera que este número aumente" (UPM, 1972)

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Andreas Pflug 2004-06-23 14:46:39 Re: [GENERAL] Building pgadmin on Fedora core 2
Previous Message Richard Huxton 2004-06-23 14:36:34 Re: timestamp without time zone format