Re: How do I grant access to entire database at

From: Jean-Luc Lachance <jllachan(at)sympatico(dot)ca>
To: Randall Perry <rgp(at)systame(dot)com>
Cc: olly(at)lfix(dot)co(dot)uk, pgsql-admin(at)postgresql(dot)org
Subject: Re: How do I grant access to entire database at
Date: 2004-07-26 19:29:01
Message-ID: 41055B7D.7000106@sympatico.ca
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

I have been thinking about this problem for quite a while.

Proper administration require creation of groups.
Adding a new user to a database is as simple as adding the user to the
group that has the required privileges to the database.

But, I think one new command would be very usefull.

CREATE GROUP <group> FROM USER <user>

where the privileges would be derived from the user's.

What do you think syntax gurus?

Randall Perry wrote:

> Thanks, I'll use it.
>
> But, if the developer's are listening -- this is really obtuse. MySQL
> administration is much easier. Please consider simplifying the GRANT process
> for future revs.
>
> BTW, I prefer postgresql for all my own development.
>
>
> on 7/18/04 4:41 PM, Oliver Elphick at olly(at)lfix(dot)co(dot)uk wrote:
>
>
>>On Sun, 2004-07-18 at 20:52, Randall Perry wrote:
>>
>>>This is a pain. Couldn't we gave something simple like
>>>GRANT ALL ON database.* TO JOE;
>>>
>>>Which would grant full access to all objects in the database to JOE for all
>>>time?
>>
>>You can do it like this in psql:
>>
>>\a
>>\t
>>\o /tmp/grant.sql
>>SELECT 'GRANT ALL ON ' || n.nspname || '.' || c.relname ||
>> ' TO joe;'
>>FROM pg_catalog.pg_class AS c
>> LEFT JOIN pg_catalog.pg_namespace AS n
>> ON n.oid = c.relnamespace
>>WHERE c.relkind IN ('r','v','S') AND
>> n.nspname NOT IN ('pg_catalog', 'pg_toast') AND
>> pg_catalog.pg_table_is_visible(c.oid)
>>ORDER BY n.nspname, c.relname;
>>\o
>>\i /tmp/grant.sql
>>
>>
>>The above could be put in a script and run from a Unix command prompt.
>>
>>(The SQL used above is adaated from that used by psql's \d command.)
>
>

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Sam Barnett-Cormack 2004-07-26 20:05:08 Re: How do I grant access to entire database at
Previous Message Sam Barnett-Cormack 2004-07-26 19:26:30 Re: How do I grant access to entire database at