Re: problems with user rights

On Wed, Mar 30, 2005 at 11:14:38AM -0500, John DeSoi wrote:
> On Mar 30, 2005, at 10:17 AM, Zouari Fourat wrote:
>
> >is it really secure in a shared hosting environnement case ?
> >do you advise me to offer pgsql in a shared hosting ?
>
> You can do all of the necessary things to control access to the
> databases.

...like using pg_hba.conf to control who's allowed to connect to
each database. If you don't want people to query the system catalogs
for a particular database, then don't allow them to connect to that
database (there are a few shared catalogs that anybody can query,
however).

The db_user_namespace configuration variable might help with managing
access, but the documentation says that it's "intended as a temporary
measure until a complete solution is found," so caveat administrator.

--
Michael Fuhr
http://www.fuhr.org/~mfuhr/